I’d just like to add that a decent chunk of the traffic to this site is from people typing “free photo editor” or things along those lines.
The creator of this site is specifically targeting people who want a free photo editor… And then complaining about people wanting to use it for free.
UK cookie law is pretty strict, and also pretty clear to read - https://ico.org.uk/for-organisations/guide-to-pecr/guidance-...
The issue is nobody bothers to follow it, and enforcement isn't likely enough, or crippling enough, to drive compliance.
The only thing a website can know, is, that "someone with a screen resolution of 1920x1080 pixels visited www.Photopea.com at 18:37". It can be useful to know the number of visitors, or the usual screen resolutions.
Which one of those do you need to know usual screen resolutions of users? Or maybe there are some other reasons those all get contacted?
(You also missed some "minor" details like IP addresses and fingerprinting profiles overall, and I'm honestly not sure if you are as ignorant as you act or just pretend to do so, and which one would be more offensive)
Like really, if you open a website for the first time in your life, what kind of secret information could it know about you?
That on its own should give you pause. But that data is then used by companies like Facebook or Google to allow the highest bidder to alter that users behaviour - by getting them to believe some propaganda, to vote for a political party, or to spend money on something they don’t need.
That’s the business model. That is how you make money on your site.
There are other ways of making money – I’m sure that had ad revenue not been available you would have found a different way.
The privacy policy which is quite hidden on the website (https://www.photopea.com/privacy.html) says nothing about that. All it says is the following:
> We use third party tracking tools to improve the performance and features of the Service (e.g. Google Analytics). Such tools are created and managed by parties outside our control. As such, we are not responsible for what information is actually captured by such third parties or how such third parties use and protect that information.
This won't fly under GDPR, just saying. Not only you are responsible for third party behavior, but you didn't even mention all tracking scripts that are directly used (I see Facebook Pixel Code right in the source code for photopea.com). You are in Czech Republic, right? I think it is in European Union.