AdRotate creates cookies if you use Geo Targeting, this cookie expires in a week, is anonymous other than the users location. And is not accessible by ordinary users.
AdRotate also creates cookies with non-identifyable information if you use Dynamic groups.
I’m looking at doing this differently – Some users reported there are too many such cookies and there are better ways these days to store that information. So that’s probably going away soon.
As for storage. AdRotate stores the user IP to keep track of recent impressions and clicks. This data is removed after 24-36 hours.
The IP is not visible to ordinary users and can not easily be accessed.
A few other users concluded that AdRotate (Pro) does not infringe on any of the new regulations.
Aside from some small changes IF they are required I’m not going to give too much attention to this EU nonsense.