[robin_reala]

Yep, and that’s the loophole the upcoming ePrivacy directive aims to fix (it was meant to launch at the same time as GDPR but reasons). https://ec.europa.eu/digital-single-market/en/news/proposal-...