This is not true - both GDPR & ePrivacy rules apply to any software, none of it is specific to websites (although obviously that's where it's most easily abused, and where most of the attention is).