3 ms·

The linked-to judgement is in German, but it does not mention the word "Google" anywhere, so I'm pretty skeptical of the claim that it somehow renders Google Fo

The linked-to judgement is in German, but it does not mention the word "Google" anywhere, so I'm pretty skeptical of the claim that it somehow renders Google Fonts "illegal". The Google Fonts FAQ pretty unambiguously states that Google does not use fonts for tracking individual users: The Google Fonts API is designed to limit the collection, storage, and use of end-user data to only what is needed to serve fonts efficiently. The use of the Google Fonts API is unauthenticated and the Google Fonts API does not set or log cookies. Requests to the Google Fonts API are made to resource-specific domains, such as fonts.googleapis.com or fonts.gstatic.com. Font requests are separate from and don't contain any credentials sent to google.com while using other Google services that are authenticated, such as Gmail. https://developers.google.com/fonts/faq#what_does_using_the_google_fonts_api_mean_for_the_privacy_of_my_users https://developers.google.com/fonts/faq#what_does_using_the_... If that's all true, I don't see how GDPR would come into play.

number6 4y ago
The argument goes that IPs are PII (at least for google). The data leaves the EU without consent and into an unsafe state (EU definition). For this The user must consent. Oh and promises from Google? We won't close Stadia? Also this point is moot since the transfer itself is illegal.
- rippercushions 4y ago
  You can't make an HTTP request without exposing your IP, so isn't pulling in any resource from any site outside the EU against the GDPR then? That sounds like a bit of a stretch.
  - number6 4y ago
    In this ruling the judge argued that pulling any ressource from a company that collects and sells you data and thus exposing the IP is something that's so bad [0] that you are to be compensated for it with 100 €. And yes there are already lawyers out there who are scrapping the web to collect the money. So yes pulling anything from an Ad-Company is illegal. [0] Kontrollverlust über ein personenbezogenes Datum an ein Unternehmen, das bekanntermaßen Daten über seine Nutzer sammelt und das damit vom Nutzer empfundene individuelle Unwohlsein so erheblich, dass ein Schadensersatzanspruch gerechtfertigt ist.

number6 4y ago

The argument goes that IPs are PII (at least for google). The data leaves the EU without consent and into an unsafe state (EU definition). For this The user must consent. Oh and promises from Google? We won't close Stadia? Also this point is moot since the transfer itself is illegal.

rippercushions 4y ago
You can't make an HTTP request without exposing your IP, so isn't pulling in any resource from any site outside the EU against the GDPR then? That sounds like a bit of a stretch.
- number6 4y ago
  In this ruling the judge argued that pulling any ressource from a company that collects and sells you data and thus exposing the IP is something that's so bad [0] that you are to be compensated for it with 100 €. And yes there are already lawyers out there who are scrapping the web to collect the money. So yes pulling anything from an Ad-Company is illegal. [0] Kontrollverlust über ein personenbezogenes Datum an ein Unternehmen, das bekanntermaßen Daten über seine Nutzer sammelt und das damit vom Nutzer empfundene individuelle Unwohlsein so erheblich, dass ein Schadensersatzanspruch gerechtfertigt ist.