> Are you including cookie banners,
Those were never necessary for operational purposes. If you were selling your
users to get Google's analytics, that's a different matter.
> privacy statements or EULAs in your product, so it's easier for your users to deploy the software legally to their audience?
Don't collect user's data, then you don't need privacy statements nor EULAs
about that.
> Do you leave it to your users to collect and provide the information about your product?
Are you Microsoft or Homebrew team that you steal users' data unless opted
out?
> And also: How do operators handle the issue if the Open Source product they are hosting did not prepare for GDPR?
Open source that doesn't steal users' data is already GDPR-compatible.
Those were never necessary for operational purposes. If you were selling your users to get Google's analytics, that's a different matter.
> privacy statements or EULAs in your product, so it's easier for your users to deploy the software legally to their audience?
Don't collect user's data, then you don't need privacy statements nor EULAs about that.
> Do you leave it to your users to collect and provide the information about your product?
Are you Microsoft or Homebrew team that you steal users' data unless opted out?
> And also: How do operators handle the issue if the Open Source product they are hosting did not prepare for GDPR?
Open source that doesn't steal users' data is already GDPR-compatible.