top | item 31681060

(no title)

cdrx | 3 years ago

> bundle it with something like https://fortawesome.com/

Using FA as a CDN is not GDPR compliant, either.

Generally speaking using any public CDN is not GDPR compliant. If you _could_ self host the files, then you can not meet the necessity test required for any of the relevant legal basis in GDPR art 6(1).

Google Fonts and FA are worse, because the personal data is shipped off wholesale to the USA. Neither FA or Google (for fonts) offers a data processing agreement that would make it legal to use.

discuss

WhyNotHugo|3 years ago

You're very right, my bad. I meant to link to Fontsource:

https://fontsource.org/

They provide the tools to bundle the fonts and serve them yourself:

https://fontsource.org/fonts/merriweather-sans

Will update original comment.