At JotUrl we don't track the IP's.
The tracking we do is just for statistical purposes, so we don't violate the GDPR.
Google Analytics (for example) tracks the users and masks the IP's so they're anonymous (because of the GDPR).
We don't track the users themsevels, but just from where they're coming.
We expose the IP's only in the Click Fraud Monitoring section and we never associate it with statistics.
As we never associate the IP's with any type of statistics, we're in compliance with the GDPR.