[noisem4ker]

Both false.

A/B testing is allowed and doesn't need opt-in if the A-or-B preference is only recorded in aggregate form and not tied to the user.

Same for the purchasing scenario. In this case, you would be explicitly collecting personal data to fulfill the order.

[tripzilch]

Crazy how people whose job it is to build this crap, don't even know what the actual rules are.

It's almost as if they just want to collect all the data on all the users forever without any oversight, by continuously rehashing bad and misunderstood versions of the GDPR and pretending it's hard and complex and vague.