I’m sure this would not work under GDPR. The host surely isn’t a data processor.