satsuサツ

Free check

Google Fonts GDPR checker

Does your website load fonts straight from Google's servers? That's the part that gets flagged. Enter a domain and find out in seconds — free, no sign-up.

Guidance only, not legal advice.

Why it matters

The LG München ruling

Since 2022, loading Google Fonts externally counts as a GDPR violation — visitors' IPs are sent to Google in the USA without asking. Law firms target this deliberately.

Often embedded unnoticed

Google Fonts often hide in themes, page builders, or via @import inside third-party CSS files — right where you don't spot them at first glance. That's exactly where we look too.

Fixable in minutes

Self-host the fonts instead of loading them from Google — set it up once, risk gone. We show the references and the fix.

Google Fonts are just one piece

The full GDPR audit also checks your site for trackers, cookies set before consent, third-party services and more — with a clear rating and recommended actions.

Run the full GDPR audit

Frequently asked questions

Why are externally-loaded Google Fonts a problem?

When fonts are loaded straight from Google's servers (fonts.googleapis.com / fonts.gstatic.com), each page view sends the visitor's IP address to Google in the USA — without consent. A German court (LG München I) ruled this a GDPR violation in 2022 and awarded damages, which triggered a wave of warning letters.

What exactly does this test check?

We fetch your domain's homepage and the CSS files it references, then look for links to Google's font servers (via <link>, @import or preconnect). Adobe Fonts / Typekit are flagged as an additional notice. The test runs entirely server-side and nothing is stored.

I received a warning letter — what should I do?

Don't react hastily or sign a cease-and-desist unchecked. Fix the cause first (self-host the fonts), then have the letter reviewed by a lawyer. This test is technical guidance, not legal advice.

How do I fix it?

Download the fonts you use once, place the files on your own server, and embed them locally via @font-face. After that the site no longer calls Google's servers. Many website builders and plugins offer a one-click option for this.

Does this test cover all GDPR risks?

No — this free test only checks externally-loaded fonts. For a complete GDPR review (trackers like Google Analytics/Meta Pixel, cookies set before consent, third-party services, a missing imprint) use the full GDPR audit after signing up for free.