Is Bunny Fonts GDPR compliant?

What does Bunny Fonts do?

A drop-in replacement for Google Fonts served from the EU that logs no personal data. Changing one hostname in a stylesheet removes the transfer that the Munich judgment was about.

Does Bunny Fonts need consent?

No consent is needed for Bunny Fonts on its own, because it does not store or read anything on the device beyond what is strictly necessary. That is not a free pass: it must still be named in your privacy policy, and the request itself still reveals the visitor's IP address to the provider.

GDPR Art. 13(1)(e)

Does Bunny Fonts send data outside the EEA?

No. Bunny Fonts keeps processing inside the EEA, which removes the third-country question entirely. You still have to name it as a recipient in your privacy policy.

LG München I, 3 O 17493/20 · GDPR Art. 6(1)

How do we detect Bunny Fonts?

We load your page in a real browser as a first-time visitor who clicks nothing, then look at what it contacted. Bunny Fonts is recognised by requests to fonts.bunny.net, and we report whether it merely loaded or actually sent data, and whether it set a cookie before any choice was made.