Iubenda logo
Start generating


Table of Contents

Google Fonts and the GDPR – How to be compliant


What is Google Fonts?

Google Fonts is a typeface visualization service provided by Google LLC or by Google Ireland Limited that allows your website/app to incorporate content of this kind on its pages. It provides an interactive web directory and APIs enabling users to include fonts via CSS.

Do I need a Privacy Policy if I use Google Fonts on my website or app?

Yes, you do.

Users of Google Fonts are bound by Google’s generic API terms of service; if you are using a Google Fonts font embedded on your site, it may track user behavior on your website.

  • If you or your users are based in the European Economic Area (EEA) or Switzerland consider to add Google Ireland Limited as a service provider when requested in the iubenda generator
  • If you or your users are based outside of the EEA, then simply add Google LLC as the service provider.

If both of the above apply, you should add both service providers.

Do I need a Cookie Policy if I use Google Fonts on my website or app?

Google Fonts does not install cookies, but if this service is used via API requests, some end-user’s data (e.g. IP address) are collected, stored and may be used for analytical purposes. Furthermore, it might be possible for Google to track end-users via the user’s browser fingerprint cross-referenced with other Google services they use.
Even if they are not strictly speaking cookies, you have to inform users of the use of any trackers or any other technology that enables the tracking of users on your website (and obtain the consent to use them).

So, in this case, yes you do.

This does not apply if Google Fonts are self-hosted on your servers and if you don’t use any other service on your website, you don’t need a cookie policy. However, since you’re likely to use other services that require you to have a cookie policy, we suggest to generate one if that is the case.

Not sure if your website is installing cookies?
Check out our guide to identify the cookies your site installs in browsers.

→ How to generate a Cookie Policy in 10 seconds

Do I need a Cookie Banner if I use Google Fonts on my website?

In general, websites that use third-party cookies as well as their own cookies for tracking and analytics must comply with the law and to do so are required to obtain the user’s express consent.

If you operate in the EU or could potentially have EU users, you need to comply with the Cookie Law.

Our Privacy Controls and Cookie Solution complies with provisions of the Cookie Law; it allows you to easily inform users, facilitate their consent and includes the option to preemptively block any scripts that could install cookies prior to consent (required in many EU countries).

→ Discover iubenda Privacy Controls and Cookie Solution
Quickly generate a fully customizable cookie banner, seamlessly collect consent, and implement prior blocking with asynchronous re-activation.

How to Create a GDPR Privacy Policy for Google Fonts

With iubenda, you can easily declare which services your website uses to collect data. You can find “Google Fonts” in the “Displaying content from external platforms” section of our Privacy and Cookie Policy Generator. Once selected, you’ll be requested to specify which data you collect.

Not sure what services to select and add to your privacy policy?
Scan your website using the Site Scanner feature of iubenda and get a list of all services used on your website right away.

Trusted by 90.000 clients, iubenda is the easiest and most professional way to generate and manage privacy & cookie policies and terms & conditions, to store and manage user consent, and to comply with the ePrivacy (Cookie Law), the GDPR and the CCPA.