[schiederme]

Google Analytics and Logs are bad /o\ (as in compliance stuff).

If you have readers in the EU and/or you are living in the EU, you are required to have a privacy policy.

This (https://www.iubenda.com/en/help/8385-gdpr-for-bloggers) article and this (https://adventurebagging.co.uk/2018/05/gdpr-guide-for-blogge...) is looking like a good read.

You could also be required to have data processing contracts.

Some local privacy protection offices have good information about GDPR for small blogs and sometimes you can even ask them directly.

no legal advice