Wrong.
And the GDPR is not just for the web.
How? I fail to understand why if a browser, configured to not persist anything by default (without a consent) would persist anything. Save for a bug, of course.