> Stop overfocusing on cookies and instead remember to add this geolocation process, and why you do it, to your privacy policy. Please name the geolocation service provider (sub-processor) you share the users IP with, so your users can audit how their data is used.

Or don't be lazy/cheap and use a geolocation implementation where you don't need to share the IP at all.