I don’t know the exact wording, but from the GDPR and accessibility trainings I had to sit through at the enterprises I used to work at, I believe there is a ce

I don’t know the exact wording, but from the GDPR and accessibility trainings I had to sit through at the enterprises I used to work at, I believe there is a certain size of company under which the regulations don’t apply. That was somewhere in the millions in revenue each year, so if you’re actually an indie-hacker, this should not apply to you. I’ll check if I can find a source for that claim though. There are some parts of GDPR that are non-negotiable however, even for indie hackers. If you collect personally identifiable info, you NEED a privacy policy, a process for users to get their data deleted if they request it, for example.