Then again GDPR requires opt-in, but most sites ignore that and many make the opt out extremely time consuming.