Comment by p_l

Then you point to netlify as responsible party and I guess you might be done ;)

GDPR compliance is overblown, when the simplest way to be compliant is to "just don't store nor process personal data"