The initial hysteria about GDPR has past, and I cleaned up my site pretty extensively. I got rid of google analytics and replaced it with Matomo (with GDPR friendly settings). I ditched Vimeo embeds due to the many cookies and tracking they do, and replaced them with self-hosted html5 video. I checked to verify that my site does not install cookies, and added a privacy page. I think my site is basically clean.
However, I am using a google font. Some are of the opinion that google fonts are taboo with GDPR, because even though no cookies are installed, google does have access to the IP address of the user. Others say it is a “grey area”. Frankly, I am kind of okay with “grey area”. Unless some countries are blocking their use or something?
Anyone care to share their thoughts about using google fonts in the GDPR era?