Porn Fetch Server infrastructure

[EchterAlsFake]

Hello you all,

as I am shifting Porn Fetch partially to a commercial product while keeping the Source open I need to move to a more professional server infrastructure. Especially to get independent from big tech like Cloudflare which I currently need to use.

However, it's quite tricky for me and I need your help on deciding.

Njal.la (Maximum Privacy for ME)
Njal.la is a hosting provider which servers are Offshore in Sweden. It's from the same guys as The Pirate Bay. They have a strict zero log policy and street credibility. They offer a fair price for their VPS and it would be the perfect solution for you and me. Because I can assure you, that your IP address is not logged on the server, neither by me nor by them, however they do not own their infrastructure entirely, meaning there is still a third party involved.

However, because they are so anonymous, they don't fulfil Art. 28 GDPR (EU). I am basically required to have a contract with a hosting provider where they tell me exactly how your data is handled. The problem is, no data is there, that could be handled.
I have asked Njal.la, but they will not sign this document for me.

Privex.io (Maximum Privacy for YOU) **
Privex offers hosting in Sweden and their data centers are 100% autonomous, meaning they control the entire infrastructure. You would essentially be as safe as a clearnet connection allows. The last time your IP would be tracked would be on the Swedish Internet Exchange point. More privacy than that is physically, in the clearnet, not possible.

Same as Njal.la, they also don't offer GDPR compliance. I have asked them and still waiting for a response, but for now, I take it as a No.

Edit: Got a response from Privex that they sign the DPA, but I still need to clarify some details

VPSBG (Still good)
They sit in Bulgaria and offer a contract for the needed compliance. They also only care about Bulgarian Law which is great, however, they lack the street credibility and are not perfectly anonymous. I can not really guarantee that your data is safe here and Bulgaria doesn't look as good to me as Sweden does.

What should I do?

Option A: Use Njal.la and ignore Art. 28 GDPR and fuck the EU
Option B: Be compliant, but risk your data?

Why can't you self-host?

Because Vodafone (my ISP) would require a commercial contract and since I am living with my parents, this is not possible.