General Data Protection Regulation

I did some changes to better comply with the General Data Protection Regulation GDPR everyone is hammered with these days.
We never have actively collected user data but we use services from Google Analytics and other third party companies I have no idea what they do with the data.

So we have

• a privacy policy
• a link to that privacy policy on every page
• an email setting, where you can turn off the pm email notification
• anonymizer settings in GA and scripts where possible
• the Cookie alert I thought we will never need

To counter data abuse of third parties in the first place I have deleted the Facebook and Twitter social plugins from the homepage. These are just links now.

Now someone tell me I have to send an email to the 38000 MG users ...