The GDPR Is a Cookie Monster