How is this not illegal under GDPR? I thought asking users to pay money to not be tracked is not allowed.