But isn't this the other way around? Like, they should ban platform X or Y, but make sure that the website respects the privacy laws. I don't think it's even fa

But isn't this the other way around? Like, they should ban platform X or Y, but make sure that the website respects the privacy laws. I don't think it's even fair to single out specific companies, each website owner should do whatever they want and make sure themselves that are respecting the law. The law can't say platforms X and Y are banned, and the webmaster simply goes with the recently released platform Z that is yet to be banned. I think that user data should never be sent to any third party without explicit user consent, but first-party data storage should be allowed if it used for legitimate business interest (e.g. improving the product usability, performance or stability).