The only thing is that I'm running the site myself. That's why I was thinking of moving the content to a blog host that would manage the back end for me. But maybe even moderating the comments myself would make me the processor or controller. If every blogger on Tumblr or wherever is subject to GDPR that way, wow is the web in trouble.