[fainpul]

What you describe is how Google Fonts handles this if you choose to use the fonts directly from Google's servers. This is a violation of GDPR. You can also download them and host them yourself, to comply with data protection laws.

https://cookie-script.com/blog/google-fonts-and-gdpr

[dpark]

This is a good thing to point people at when they claim that GDPR is simple to implement. This legal interpretation is totally reasonable but it’s probably not what most developers would expect.

[47282847]

The law itself is very clear and concise so it is straightforward to find that this is not only a reasonable interpretation but right there in the law.

[dpark]

I would not describe 88 pages as concise.

Regardless, my point is just that there are implications of the GDPR that a lot of engineers are probably not aware of. It makes sense that sending your traffic to Google for fonts violates GDPR. But as an engineer, this is just a CDN. I would not have considered this a violation of GDPR without seeing someone else point it out.