Google Fonts loaded from fonts.googleapis.com
Your site loads fonts directly from Google's servers (fonts.googleapis.com). Each time a visitor loads a page, their browser sends a request - including their IP address - to Google's infrastructure in the US.
Why this matters
Some European courts and regulators, notably a 2022 Munich regional court decision, have treated loading Google Fonts from Google's servers without consent as an unlawful transfer of the visitor's IP address, and damages were awarded in at least one case. Rulings and enforcement vary by country and have not been uniform. Self-hosting the fonts removes the question entirely, so it is a simple precaution if you have EU visitors.
How to fix it
Download the font files (woff2 format) and host them on your own domain. Update your CSS to use @font-face pointing to your own files. Google Fonts has a download button, and tools like google-webfonts-helper make the process simple.
Turn website findings into an action plan
Create an account to start a Full Audit of your website, with supporting evidence and a prioritised action plan.
Start Full Audit