[tobr]

Genuine question: where does this fall with regards to GDPR? If you aggregate data about a European, don’t you technically need to ask them for permission first?