> I think, you also need to be GDPR compliant for EU users when they are not in the EU.

What you think does not align with my understanding of the GDPR, what makes you say this?