Check · Art. 44 GDPR
Google Fonts loaded directly from Google
What it means
Your app loads fonts from fonts.googleapis.com / fonts.gstatic.com. Every visitor's IP address is sent to Google servers in the US.
Why it matters
German courts (LG München, 2022) ruled this transfer unlawful without consent; Art. 44 GDPR restricts transfers to third countries. It's also the single most common warning-letter trigger.
How to fix it
Self-host the font files (they're openly licensed) and remove the Google request. Takes minutes with google-webfonts-helper.
Does your app have this problem? The free passive check tests this and 4 more areas — no login, nothing touched.
Check your app free