Did you know Google Fonts is installed on approximately 111,579,992 websites, with around 50,103,810 of those currently live?

Did you also know if you visit a site that uses Google Fonts, it automatically collects user:

- IP address: Which identifies your device on the internet (as of 2022, Google stopped storing users' IP addresses, but they still collect this information).

- User agent: Information about your browser and operating system.

- Referer: The URL of the webpage you are visiting.

...and is therefore "out-of-the-box" in violation of GDPR law?

If you are a website visitor:

You can block 3rd party fonts (web fonts) with uBlock Origin.

1. Open uBlock Origin's dashboard.

2. Go to the "My filters" tab.

3. Add the following line to block Google Fonts:

*$font,third-party

4. Click "Apply changes" to save the filter rule.

There is an even stricter option that blocks ALL remote fonts (not just Google Fonts) that you can activate by selecting "Block remote fonts" in the extension's settings.

*Sites that do not display properly can be excluded from the block.

If you are a website owner:

You can protect your visitors' privacy by hosting your own fonts locally (on the same server as your web pages), using basic OS fonts, or checking out Bunny.

If you haven't heard of Bunny CDN, they offer the only fully GDPR-compliant fonts powered by a CDN as a drop-in replacement for Google fonts.

According to Bunny:

"Bunny Fonts is an open-source, privacy-first web font platform designed to put privacy back into the internet.

With a zero-tracking and no-logging policy, Bunny Fonts helps you stay fully GDPR compliant and puts your users' personal data into their own hands."