GDPR fines are set among other things according to the resources of the entity that broke the rules. As a private person making a side project, you won't be liable for millions.
The most recent examples of individuals being fined have been fines around €200 [0]
The most recent examples of individuals being fined have been fines around €200 [0]
[0] https://gdprhub.eu/index.php?title=ANSPDCP_(Romania)_-_Fine_...