Just because a service is free does not mean consumer protection and data protection laws (including GDPR) no longer apply.
Why would you think otherwise?
Closing that loop hole was valuable.