Google Fonts

Overview

Google Fonts is a free font hosting service operated by Google that delivers web fonts to websites via a global CDN. It hosts hundreds of open-source typeface families and is one of the most widely used web font services.

What This Script Does

Google Fonts works in two steps:

1. CSS request to fonts.googleapis.com — Returns a stylesheet with @font-face declarations tailored to the visitor's browser. Google uses the User-Agent header to serve optimal font formats (woff2 for modern browsers).
2. Font file requests to fonts.gstatic.com — Downloads the actual font files referenced in the CSS.

Cookies: Google Fonts does not set any cookies. The fonts.googleapis.com and fonts.gstatic.com domains are cookie-free.

Data transmitted: The requests include the visitor's IP address (as with any HTTP request), User-Agent string, and Referer header. Google's privacy policy for Google Fonts states that this data is not logged or used for tracking purposes.

No JavaScript required: Google Fonts uses CSS <link> tags, not JavaScript. No script execution occurs. No tracking pixels, no analytics beacons, no advertising functionality.

GDPR case law note: In January 2022, a Munich court (LG München, case 3 O 17493/20) ruled that loading Google Fonts from Google's CDN without consent violated GDPR because it transmitted the visitor's IP address to Google (a US company) without justification. This ruling led many sites to self-host Google Fonts instead. However, the EU-US Data Privacy Framework (July 2023) has since provided a legal mechanism for US data transfers, and the ruling's applicability has evolved.

Consent & Compliance

Google Fonts is classified as essential in its consent category because it serves a presentational function (rendering text) with no tracking or analytics purpose.

Under GDPR, the primary concern is not cookies (none are set) but the transmission of IP addresses to Google's US servers. With the EU-US Data Privacy Framework in place, this transfer has a legal basis, though some privacy advocates recommend self-hosting as a belt-and-suspenders approach. Under ePrivacy, since no cookies or device storage is accessed, the cookie consent rules do not apply.

Under CCPA, Google Fonts does not collect personal information for advertising or marketing purposes.

Should You Block This Without Consent?

No. Google Fonts does not set cookies, does not execute JavaScript, and does not perform tracking. It serves a legitimate presentational function. Blocking it would break the visual appearance of your site. If you have concerns about IP address transmission to Google, the recommended approach is to self-host the font files rather than blocking the CDN-served version, as blocking without a self-hosted fallback will cause visible rendering degradation.