You still have GTM, Hotjar and Fullstory included by default, without opt-in and no way to opt out. This significantly reduces your trustworthiness for me, as well as my willingness to try out or recommend to others what looks like a pretty useful tool.

Consider if you really need all that analytics, and whether it's worth the invasiveness (edit: and GDPR breach, you being located in Germany). Page hits, sign ups, created flash cards and other usage is something you have available without any of those tools.