Comment by flukus

Are you storing any user data? Sounds like it could all be stored client side and the GDPR is irrelevant to you.