My take on GDPR compliance from a solo developer perspective without a legal team to back him up.
Why should this be your headache? It's collected by Google, not you.