As you may or may not be aware, GDPR (the General Data Protection Regulation) comes into effect on May 1st, 2018. From what I can tell – and the text of the regulation is fairly convoluted and hard to understand – anonymized data collection (such as IP address of visitors) needs no active consent, while non-anonymized data collection does require active consent. To this effect, I have combined and consolidated what used to be to pages – the cookie and privacy policies – into one, which you can find here.