I'm not really sure what to title this question, but I've built an analytics software, Paperclip, and this is the dashboard:
However, you can click on a user ID (right) like
abaer and see information about the user:
I assume letting people see the user's IP address is okay, but it also shows them other pages the user has visited across all paperclip-enabled websites, not just yours. My friend says this may be a violation of GDPR. Is this true?