Comment by jarofgreen

> We did all the tracking on the backend

Just checking, you do know that still counts as tracking and may fall under GDPR rules? GDPR was never just about cookies.