Ok, but what if the server is in the UK, where they do have jurisdiction, or other countries go crazy? The UK isn't the only place where privacy and freedom of speech are under attack in the west. The whole of the west is. As for the GDPR, it's a piece of legislation the EU mostly got right. It's not bad, for the most part it protects people when they bother to enforce it. The issue is that they didn't follow it by being consistent and continuing to strengthen the right to privacy, instead limiting it and attacking it.