Here's the thing. The GDPR isn't really that great a set of rules. It's too vague, and really hard to manage.

I do however treasure privacy rights. That's why I don't use cloud flare. It blocks TOR, and many VPN's.

I've almost built my site to favour those methods of privacy, and I highly recommend them to people

I have paid the price of being on TOR often enough. Heaps of sights are beyond my reach.

People have the right to avoid cookies, but those rights come at a cost.

Oddly most of my users are from the EU, they just use VPN's