GDPR requires you to “prove” you gained consent by creating a server-side timestamped log of the option each user chooses.

But you cannot see my comment because I was hellbanned, so enjoy wondering.