Yeah, no. For a small company its not really that complicated and it's also uniform. You can use a simple service for things like cookies and then manually comply in the backend.

Reading GDPR is less complicated than finding out precisely what unregulated in most states means.