Apparently embedding contents from other sites can be legally seen as "transferring somebody's IP to another service without their consent" which violates GDPR. The proper solution would be to cache images/videos but this would use valuable hard drive space and the site currently isn't hosted on a very large VPS.
So the better solution would be to hide external images by default (replacing them with a link) and then have the user consent to showing them via a pop up, and then save their preference via a cookie (the only time these will likely ever be used on this site).
German Court Rules Websites Embedding Google Fonts Violates GDPR
Apparently embedding contents from other sites can be legally seen as "transferring somebody's IP to another service without their consent" which violates GDPR. The proper solution would be to cache images/videos but this would use valuable hard drive space and the site currently isn't hosted on a very large VPS.
So the better solution would be to hide external images by default (replacing them with a link) and then have the user consent to showing them via a pop up, and then save their preference via a cookie (the only time these will likely ever be used on this site).