Speaking of the sharing codes, wouldn't using a shared code actually mean that the privacy policy agreement you state would be given then will be null and void GDPR wise as there's no clear an freely given consent, but just an entered code. Unless upon entering the code there's a popup asking you to accept the policy in case you aren't linked.We are not pointing out a solution here. You have to bear in mind that the previous sentence is merely informative in order to be as transparent as possible. We do not advocate password sharing, if you use a shared password, it is at your own risk. The reason we ask you to have a Paradox Account to retrieve the codes is to ensure you agree with our Privacy Policy and get the opportunity to read it and understand which personal data will be collected from you when you play these old versions.
Thank you for pointing this out, I will update the FAQ accordingly.
And hence any data retrieved from a sharer would make you breach GDPR.
Though I'm just a layman so I might be completely wrong, but that at least is what it looks to me based on what I've been told about how the law works.