[bflesch]

> This website collects anonymous usage analytics data via GoatCounter and Umami.

My uBlock origin shows that googlefonts.com and fonts.googleapis.com are being blocked.

It irks me a bit that your message explicitly mentions two trackers but it fails to mention the Google tracking. Google is also not mentioned in your privacy policy. Is there a reason for this?

[rafram]

Google Fonts is not a tracker.

https://developers.google.com/fonts/faq/privacy

> For clarity, Google does not use any information collected by Google Fonts to create profiles of end users or for targeted advertising.

[bflesch]

Google has carte blanche to lie to foreigners for national security purposes, it's not even illegal for them. The data is fed into the mass surveillance systems.

IP, user agent, language headers and network timings are enough to fingerprint and associate you with any other accounts at US tech companies. The visited website is linked via Referer / Origin headers to your browsing history.

All of this tracking is passive and there is no way to check for an independent observer.

Yet here you are defending the most privacy invasive company on the planet.

[sillyblob67]

By default, loading Google Fonts from Google’s servers exposes user data to Google (e.g., IP Address, User agent, Referrer, Timestamps, Cache identifiers).

It's passive tracking, but it's tracking.

[pwdisswordfishy]

Well, if Google said it, it must be true.

[nake89]

Your message sent me down a weird rabbit hole of trying to find privacy friendly alternative to google fonts. I found this: https://github.com/coollabsio/fonts They claim to be a privacy friendly drop-in replacement. Their main website: https://fonts.coollabs.io/

[cardanome]

The easiest solution is to simply self host your fonts.

[mrob]

The easiest solution is to use the default font. This has the additional benefit of being the most legible font for every reader, because it's the one they have the most experience reading.

[Piraty]

remember the times when common sense was to not accept the remote site's fonts, and thus web devs should not use them

[bflesch]

Yes. I recommend everybody to do a deep dive into font file formats and you'll see a lot of monsters hiding.

[yencabulator]

That definitely deserves better tooling!