As far as I understand, to make this site GDPR compliant you would have to:
1. Get consent when someone creates an account, saying what you do with the data including how you make automatic decision (e.g. which amazon pages you recommend).
2. Allow people to unconsent/delete accounts
3. Have a page that allows a user to download their data.
4. Have a way for them to fix mistakes in that information
That doesn't seem that burdensome. In fact some flavor of that is pretty much what you get with standard a standard create account/view account/change account/delete account workflow.
1. Get consent when someone creates an account, saying what you do with the data including how you make automatic decision (e.g. which amazon pages you recommend).
2. Allow people to unconsent/delete accounts
3. Have a page that allows a user to download their data.
4. Have a way for them to fix mistakes in that information
That doesn't seem that burdensome. In fact some flavor of that is pretty much what you get with standard a standard create account/view account/change account/delete account workflow.