@snarfed.org The GDPR applies to US-based companies that offer services to people in EU Member States. It applies to not-for-profit organisations. It will apply to you. Figure this out before launch.
Besides, consent matters even if you don't get fined for ignoring it.