Hacker News Reader

is that true? Using a font is not trafficking any of the users Pii data? Google might be breaching gdpr if they are doing some crazy tracking, but I don’t see how a consumer of their fonts could be breaching. I am probably missing something.

View on HN

Using a Google font causes the client to send a request to Google servers. The Google server then receives the client's IP address. Occasionally a judge will consider that a GDPR violation. [0] Sometimes using a CDN will also be considered a GDPR violation under the same logic. [1]

But it seems like it just depends on which judge you get. There are thousands of sites in Europe that use Cloudflare, Google Fonts and Shopify and only a few that have been fined because of it.

[0]: https://www.theregister.com/2022/01/31/website_fine_google_f...

[1]: https://lsww-de.translate.goog/shopify-illegal/?_x_tr_sl=de&...

Important context:

- this is ridiculous. “Leaking an ip address on the internet!?” - so isps are screwed?

- it was a 100£ fine.

To expand on this. One difference between CDNs and Google Fonts is, that you normally sign a contract with your CDN under GDPR. I think the English term is data processing agreement. If the CDN is above board, and you have this contract, the situation is different.

Reply on news.ycombinator.com