Fyi: Under GDPR you have to host these fonts yourself.
https://github.com/google/fonts/issues/1495
...still apparently up in the air, more than five years after the GDPR went into effect.
> The Google Fonts Web API does not log or store IP addresses.
The linked source [2] only says that they don't use IPs to create profiles or to target ads. They very well might store them. Even giving them the benefit of the doubt, they can change their mind at any time and suddenly one is in legal jeopardy.
[1] https://github.com/google/fonts/issues/5463#issuecomment-129... [2] https://developers.google.com/fonts/faq/privacy
But it seems like it just depends on which judge you get. There are thousands of sites in Europe that use Cloudflare, Google Fonts and Shopify and only a few that have been fined because of it.
[0]: https://www.theregister.com/2022/01/31/website_fine_google_f...
[1]: https://lsww-de.translate.goog/shopify-illegal/?_x_tr_sl=de&...
- this is ridiculous. “Leaking an ip address on the internet!?” - so isps are screwed?
- it was a 100£ fine.