Question about the GDPR and the user consent

[loic-parent]

Hello,

I wonder if I have to setup specific conditions and content to inform and obtain the consent of the user to use Firebase Analytics and so Google Analytics.

At the moment, I use the plugin without any other custom verifications but I wonder if this is OK for the GDPR. For a website I'd say no but for an hybrid mobile app I am not sure.

Could you precise it to me?

1. Can I use the plugin alone (without any other user validation/consent)?
2. Should I inform the user about the list of cookies and storage data (local/session)?
3. Should I inform the user about this tracking tool?
4. Should I propose to the user a way to enable/disable this tool?

Thanks for your help,
loïc