Re legality : when a website such as Syntax bomb reports on the front page the number of 'Guests' online - do you tjink they've opted in?
Re EU. I know, Google has had me have this in place for years:https://mattiesgames.com/privacypolicy.html