I don’t track your data - not even Google Analytics because I trust my readers are responsibly using adblock and tracking protection anyhow. And I am not using cookies anywhere for you EU cats.
I do use two CDNs, Cloudflare’s CDNJS for highlight.js stuff and Google for fonts. Their rules apply to their stuff. Maybe if people complain enough, I’ll host those things too but I try to use HSTS and subresource integrity where possible so there’s less chance of any monkey business.