my point is that it's ambiguous, even gdpr.eu says otherwise, and it's so unclear that app developers err on the side of caution. It's nothing to be smug about. All of these seemingly capable people struggle with it .