Bare in mind when using Google Fonts that Google collects user data in order to compile statistics about the user behaviour for its own purposes. However, this is permitted on legal basis of Art. 6 para. 1 lit. f) GDPR. In this case the controller has to mention Google Fonts in his/her privacy policy, preferably with a link to Google’s privacy policy. In addition, there has to be an opt-out possibility with a link to the corresponding Google page. However, since there is no opt-out offered by Google, the use of Google fonts is controversial. ePrivacy therefore recommends that you host the fonts locally as a safer way to use Google fonts GDPR compliant.
If you already use Google Web Fonts on your web pages, we encourage you to add the following text to your privacy statement:
Google Web Fonts
This page uses so-called web fonts provided by Google for the uniform display of fonts. When you access this page, your browser loads the necessary web fonts into your browser cache to display text and fonts correctly.
For this purpose, the browser you are using connects to Google’s servers. Here Google gains knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
If web fonts are not supported by your browser, a standard font will be used by your computer.
Further information on Google Web Fonts can be foundat developers.google.com/fonts/faq and in Google’s privacy policy: www.google.com/policies/privacy/.
Do you have any further questions about the content of your privacy policy or need any support on this particular matter? Please feel free to contact us!