"Step 3 - Attribute anonymous page views to the user!" - not GDPR compliant without consent for that.