[kureikain]

It looks like the finger print only rely on ip/user-agent and I think ip/user-agent are ok to be stored and still GDPR compliance?

[marvinblum]

Everything that can be used to uniquely identify a visitor falls under the GDPR. We don't store IP addresses, so it should be GDPR compliant, but we still need to check that to make the claim.