Ask HN: Best way to host a GDPR compliant static website?

2 points by macro-b 3 years ago | 3 comments

I am trying to build a website and I would like to avoid bugging users with cookie banners and consent forms. I was interested in Cloudflare’s offering because they provide analytics without using cookies, but being that Cloudflare Pages and Analytics redirect traffic outside the EU and are subject to US regulations seems like not an option if I do not want to ask user consent. Any suggestions or recommendations?

S3 buckets hosted in EU with privacy friendly analytics? EU providers?

Trying to do the right thing and creating a website that is organically GDPR compliant to visit should be easier… and every article you read about the subject are companies trying to sell you something, no genuine unbiased opinions.

Thanks to the HN community in advance

pwg 3 years ago |

> I would like to avoid bugging users with cookie banners and consent forms

Then don't set any tracking cookies, and don't collect any personal data, and you'll be GDPR compliant.

macro-b 3 years ago | |

That is my plan, but hosting on something that’s subject to US regulations seems like a problem and limits options quite a bit.

XCSme 3 years ago | | |

Use an EU-based host, it should be better.

You might even have to host different versions in different regions if you want to be fully compliant in all countries with their versions of GDPR.