We take privacy very seriously, none of your calendar data is stored, just tabulated, and as soon as we finish we remove the token so we can't access anything in the future. The ONLY thing we store is the tabulation and your email address (which is not made public) tied to that tabulation.
[Update] - We are only doing 1st party consent so I will email their support to find out what the heck is going on with it showing that.
When you click Customize, and manually turn off all options, the very next page you visit will show you the GDPR prompt again - and again. This definitely violates the consent statutes.
Please let your provider know so they can fix this bug, and on either their or your side, provide an option for a clear No button, or at the very least a quick way to disable all.
What's the best way I can get GDPR compliant? I know that GDPR isn't designed to crack down on products like mine, but I'm still legally required to comply. A simple notice saying user data isn't given to any third parties? I have a privacy policy, of course.
As for bragging about your privacy stance - well - that's a product design decision. Personally I'd probably do it on the "why you should use this" style pages and leave it out of any functional pages.
Consent to store data or share it with third parties? I store PII, but I don't share it with any third-party.
Best way to comply with GDPR is read it carefully and/or hire a lawyer.
Microsoft does not, so it will remain valid. We don't store it or log it anywhere, and the system that retrieves and processes data is not publicly accessible.
I know you have good intentions here, but I hope you are aware that you may unintentionally be storing it somewhere [1]. Not much you can do about it unless you keep actively searching for it everywhere.
[1] I strongly remember reading an article here on HN recently about some security breach stemming from writing production secrets in log files, but I can't find the link :/ If anyone else has it, can you post it?