3 ms·

> Scenario: You want consent to use Google Fonts > Outcome: You can’t include the Google Font CSS until you have consent > Why: You don’t have consent to allo

> Scenario: You want consent to use Google Fonts > Outcome: You can’t include the Google Font CSS until you have consent > Why: You don’t have consent to allow Google to process the IP, which is considered personal data Are you fucking high? Better not use a CDN then - they'll get the IP. Better not have any links - the users browser might prefetch, giving the link their IP. No embedding youtube or twitter. They'll get the IP. This is beyond fucking stupid. > Scenario: You only provide an ok button on your consent banner > Outcome: You’re not compliant with GDPR > Why: The user must be able to refuse consent User can easily refuse consent - go visit some other website.

deleted 4y ago
[deleted]
eli 4y ago
“Leak of IP Address Via Google Fonts Prompts GDPR Fine” https://www.cpomagazine.com/data-protection/leak-of-ip-address-via-google-fonts-prompts-gdpr-fine/amp/ https://www.cpomagazine.com/data-protection/leak-of-ip-addre...
- muro 4y ago
  That is a stupid decision. Loading a page / resource from the web by itself should not be a gdpr violation.
  - deleted 4y ago
    [deleted]
  - blueflow 4y ago
    Loading a resource submits your IP address to the server. If you query a server from company A you surely consent to it, if the website adds queries to company B's server it sends your PII to company B without your consent. Its especially bad when company B is Google, who operate on selling that data.
    - smeagull 4y ago
      Oh no! Now everyone has to self host or Amazon will get all those IPs!
pbhjpbhj 4y ago
>User can easily refuse consent - go visit some other website. // GDPR requires that you allow users to access services without giving up PII unnecessarily on an even footing with those who do willingly consent to being tracked. You provide an "accept all tracking" button (eg "ok"), well you can provide a "reject all unnecessary tracking" button too. You, the website provider, can easily not track users and not trade in their PII.
- smeagull 4y ago
  Which is ridiculous because the PII funds the site.
jeroenhd 4y ago
No. https://www.theregister.com/2022/01/31/website_fine_google_fonts_gdpr/ https://www.theregister.com/2022/01/31/website_fine_google_f... The inclusion of third party components on your website is your choice as a website owner. You have the responsibility not to leak data to Google. Your consent workaround works if you do not collect any kind of personal data before the user clicks OK. As long as you get consent before enabling processing (i.e. you include Google Fonts or any other kind of GDPR incompatible third party) you're probably fine unless you do something particularly egregious. "By visiting this site you agree to the terms" is useless though, unless you somehow show those terms before the site gets loaded.
- smeagull 4y ago
  I'm so glad geoblocking the EU is so easy.

deleted 4y ago

[deleted]

eli 4y ago

“Leak of IP Address Via Google Fonts Prompts GDPR Fine” https://www.cpomagazine.com/data-protection/leak-of-ip-address-via-google-fonts-prompts-gdpr-fine/amp/ https://www.cpomagazine.com/data-protection/leak-of-ip-addre...

muro 4y ago
That is a stupid decision. Loading a page / resource from the web by itself should not be a gdpr violation.
- deleted 4y ago
  [deleted]
- blueflow 4y ago
  Loading a resource submits your IP address to the server. If you query a server from company A you surely consent to it, if the website adds queries to company B's server it sends your PII to company B without your consent. Its especially bad when company B is Google, who operate on selling that data.
  - smeagull 4y ago
    Oh no! Now everyone has to self host or Amazon will get all those IPs!

pbhjpbhj 4y ago

>User can easily refuse consent - go visit some other website. // GDPR requires that you allow users to access services without giving up PII unnecessarily on an even footing with those who do willingly consent to being tracked. You provide an "accept all tracking" button (eg "ok"), well you can provide a "reject all unnecessary tracking" button too. You, the website provider, can easily not track users and not trade in their PII.

smeagull 4y ago
Which is ridiculous because the PII funds the site.

jeroenhd 4y ago

No. https://www.theregister.com/2022/01/31/website_fine_google_fonts_gdpr/ https://www.theregister.com/2022/01/31/website_fine_google_f... The inclusion of third party components on your website is your choice as a website owner. You have the responsibility not to leak data to Google. Your consent workaround works if you do not collect any kind of personal data before the user clicks OK. As long as you get consent before enabling processing (i.e. you include Google Fonts or any other kind of GDPR incompatible third party) you're probably fine unless you do something particularly egregious. "By visiting this site you agree to the terms" is useless though, unless you somehow show those terms before the site gets loaded.

smeagull 4y ago
I'm so glad geoblocking the EU is so easy.