The server where the font is being loaded from would have no record of your activity. That's the but that improves privacy. I think there's an expectation that

The server where the font is being loaded from would have no record of your activity. That's the but that improves privacy. I think there's an expectation that if you're concerned to this extent you'd have JS disabled as well, which would make it hard to detect whether you're displaying the font. Probably not impossible with CSS though.