I run multiple Discourse sites. You can spin that however you want. People have personal data on my sites for sure. Is that “tracking” in your book? What about in the EU’s book? Anyway, I’m not going to read the GDPR to find out whether that’s “illegal,” no matter what they say.