Let me be more clear. If a European buys a product from a US company and that company operates and is incorporated in the US then GDPR can be ignored.

The EU would say otherwise but fortunately they don’t get to police the world anymore than any other foreign country.