GDPR Applicability Debate

Check the GDPR. The EU requires certains things of businesses not in the EU, who interact with EU citizens.

Yeah, my understanding is that if they did not make an attempt to block EU citizens from using the site then GDPR does apply. The problem is that IIRC, when I was singing up they were explicitly serving only few cities in the US. Might be misremembering though, it was a while back.

GDPR is not limited to companies inside the EU only. It covers (the PII of) every _user_ from the EU, location of the website does not matter.

Except GDPR also covers EU citizens outside of the EU, so this service is useless.

Not really. Depending on what you mean by European users, GDPR may not apply here (if GDPR was what you were alluding to).

The GDPR applies to personal data of all EU citizens and permanent residents. Even a tourist in the US who browses a website which is only available in the US.But if the company has no offices, bank accounts or other business presence in the EU, there is no practical way to enforce it.

afaik gdpr works in such a way that even if you are eu citizen in the us, you still benefit from this law

I think GDPR applies to EU citizens no matter where they are? So while this will work for most cases, it doesn't really give you immunity?

I thought GDPR applies for EU citizens outside of the EU as well?

GDPR doesn't apply for entities outside EU if they aren't specifically targetting services at individuals in the EU (which can be indicated by using EU domains, supporting EU currencies, supporting EU languages or mentioning EU customers in promotional materials).