GDPR implications

Have you given any thought to the GDPR implications of this plugin?

For example, AFAIK, when a page or post loads that contains this plugin a hit is sent to static.hupso.com (for each instance of the share bar) and a cookie is set (name = __utmah).

I see no problem doing this if the visitor CLICKS on a share icon. However, to send data to a third-party on page load only i.e. WITHOUT a visitor click, does require explicit consent from the visitor in order to be GDPR compliant.

I would be interested in your thoughts…