Indie game storeFree gamesFun gamesHorror games
Game developmentAssetsComics
SalesBundles
Jobs
Tags
(+1)

Yeah, Google Analytics can be tricky. I found gdpr.eu as a very helpful tool actually. 

This is what they say about analytics when you do not need consent:

  1. Processing is necessary to satisfy a contract to which the data subject is a party.
  2. You need to process the data to comply with a legal obligation.
  3. You need to process the data to save somebody’s life.
  4. Processing is necessary to perform a task in the public interest or to carry out some official function.
  5. You have a legitimate interest to process someone’s personal data. This is the most flexible lawful basis, though the “fundamental rights and freedoms of the data subject” always override your interests, especially if it’s a child’s data.

but if you want to use analytics for marketing, you should get consent. You can read more here: https://gdpr.eu/gdpr-consent-requirements

So it wouldn't be illegal if I don't share the data anywhere if I understand correctly?

I would only use it to see what the interests of my community could be for other games. And where my community comes from (what is the best time to share a devlog, new release...). Certainly not for personal advertising. I think this falls under n° 5?

(+1)

i'll put it in simple terms:

- if your website is using 3rd party tools like Youtube video (yes that embed counts), comments, fourms, etc.

- You need data for legal reasons

- If data is needed for medical reasons.

- Using data as a tool for target ads.

If your website has anything on this then you need to have users agree to the cookie or use GDPR warning tools you sometimes find in sites. What you would be doing falls under the 5th rule because it will become atarget  ad instead of building a game you never plan. No one asked you to build the targeted ad, you decided besed on data.