satsuサツ

Free check

Google Fonts GDPR checker

Does your website load fonts straight from Google's servers? That's the part that gets flagged. Enter a domain and find out in seconds — free, no sign-up.

Guidance only, not legal advice.

Why it matters

The LG München ruling

A 2022 Munich court (LG München I) ruled that loading Google Fonts from Google's servers without consent infringed GDPR; German courts have since differed. Law firms still send warning letters over it.

Often embedded unnoticed

Google Fonts often hide in themes, page builders, or via @import inside third-party CSS files — right where you don't spot them at first glance. That's exactly where we look too.

Fixable in minutes

Self-host the fonts instead of loading them from Google — set it up once, risk gone. We show the references and the fix.

Google Fonts are just one piece

The GDPR audit (Pro and Business) also checks your site for trackers, cookies set before consent, third-party services and more — with a clear rating and recommended actions.

See the GDPR audit

Frequently asked questions

Why are externally-loaded Google Fonts a problem?

When fonts are loaded straight from Google's servers (fonts.googleapis.com / fonts.gstatic.com), each page view sends the visitor's IP address to Google in the USA — without consent. A German court (LG München I) ruled this a GDPR violation in 2022 and awarded damages, which triggered a wave of warning letters.

What exactly does this test check?

We fetch your domain's homepage and the CSS files it references, then look for links to Google's font servers (via <link>, @import or preconnect). Adobe Fonts / Typekit are flagged as an additional notice. The test runs entirely server-side. The scanned address is not stored; we only keep a short-lived request counter per visitor for rate limiting.

I received a warning letter — what should I do?

Don't react hastily or sign a cease-and-desist unchecked. Fix the cause first (self-host the fonts), then have the letter reviewed by a lawyer. This test is technical guidance, not legal advice.

How do I fix it?

Download the fonts you use once, place the files on your own server, and embed them locally via @font-face. After that the site no longer calls Google's servers. Many website builders and plugins offer a one-click option for this.

Does this test cover all GDPR risks?

No — this free test only checks externally-loaded fonts. For a complete GDPR review (trackers like Google Analytics/Meta Pixel, cookies set before consent, third-party services, a missing imprint) use the GDPR audit (Pro and Business).