Do Google Fonts need consent? The GDPR question, explained
A German court ruling put Google Fonts on the privacy radar: loading them from Google's servers sends the visitor's IP address to Google, and a court treated that as a data-protection breach without consent. Here is the practical read.
What actually happened
When you embed Google Fonts the usual way, the visitor's browser fetches the font files from Google's servers, which means their IP address, personal data under GDPR, is sent to Google. A German court decided that doing this without consent was unlawful and awarded damages. It was one court, but it made every EU site owner nervous.
Do you need a consent banner for it?
You can avoid the question entirely. Unlike analytics, fonts do not need to be loaded from Google at all. The widely recommended fix is not to add fonts to your consent banner, but to remove the data transfer in the first place.
The simple fix: self-host
- Download the font files and serve them from your own domain, so no visitor IP ever goes to Google.
- This removes the font from the consent problem completely, and often speeds the page up too.
It is a good example of a broader principle: the cleanest consent setup sends as little as possible to third parties by default. The same instinct helps with embedded videos and other third-party content.
Want us to check your tracking in 10 seconds?
Pop in your domain and we will show you what is firing, what is not, and where data is leaking. Free, no signup.
Check my tracking freeGet a plain-English audit
We check your live GA4, Google Tag Manager and consent setup by hand and tell you exactly what is wrong. The audit comes off any build.
See how it works & pricingDatahound are analytics and ad-tracking specialists. We fix broken GA4, Google Tag Manager and server-side tracking so every sale, form and call gets counted. Back to datahound.agency · All tracking guides · Do embedded YouTube videos need consent?