Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Bunny Fonts is a privacy first, GDPR friendly drop in replacement for Google Fonts that serves web fonts without logging IP addresses or setting cookies.
Bunny Fonts is a free web font delivery service operated by BunnyWay, a company based in the European Union. It offers the same open source font catalogue as Google Fonts with a compatible API, so developers can switch by changing the font URL. Its main selling point is that it serves fonts without the privacy drawbacks associated with loading fonts from Google.
Bunny Fonts sets no cookies and, according to its operator, does not log or store visitor IP addresses or any personal data for the font requests. The browser still connects to fonts.bunny.net to download the font files, but that connection is designed to leave no tracking trail. This is the central difference from a typical third party font host.
A 2022 German court decision found that embedding Google Fonts in a way that exposed visitor IP addresses to Google without consent breached the GDPR. Bunny Fonts was created to remove that exposure: because no personal data is logged and the provider is in the EU, the privacy risk of loading fonts is minimised.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Since Bunny Fonts sets no cookies and does not track users, it does not require cookie consent under the ePrivacy rules. Self hosting fonts is the only way to avoid any external request entirely, but Bunny Fonts is widely regarded as a compliant option that does not need a consent banner of its own.
BunnyWay is established in the European Union and states that font requests are processed without retaining personal data. Files are cached on a global content delivery network for performance, yet because no identifiable visitor data is stored, the third country transfer concern that affects US font hosts is largely removed.
Replace Google Fonts URLs with the equivalent Bunny Fonts URLs, or self host the fonts if you want zero external requests. Mention the font provider in your privacy notice for transparency, and confirm the current data handling statement on the Bunny Fonts website as part of your vendor review.
Websites using Bunny Fonts must obtain user consent under GDPR regulations.
DPIA considerations
Bunny Fonts almost never requires a DPIA because it processes no tracking data. A short note in your records of processing confirming that fonts are served without personal data logging is normally enough.
Sample consent text
We load fonts from Bunny Fonts, a privacy friendly European font service that does not set cookies or log your IP address. No consent is required for this.
Third-party domains contacted
fonts.bunny.netfonts.bunnycdn.comBunny Fonts is an essential service, but transparency matters. Manage all your consent with FlowConsent.
No, Bunny Fonts does not set any cookies. It only serves font files, and its operator states that it does not log IP addresses or other personal data for those requests.
No cookie consent is required because Bunny Fonts neither stores information on the device nor tracks visitors. It was specifically designed to be used without a consent banner.
Because no personal data is logged, the font delivery typically relies on legitimate interest at most, and many organisations treat it as a privacy neutral technical resource. Always confirm against the provider current statement.
The operator BunnyWay is established in the European Union and does not retain personal data for font requests, so the United States transfer problem that affects Google Fonts does not apply in the same way.
A DPIA is effectively never needed for Bunny Fonts because it processes no tracking data. A short record of processing entry is sufficient.
Swap your Google Fonts links for Bunny Fonts links, or self host the fonts for zero external calls. Note the provider in your privacy policy and keep a copy of its data handling statement.
The main alternatives are self hosting the font files on your own server, or using another European font service. Both keep visitor data within your control.
Since there are no cookies, update the privacy notice rather than the cookie table: state that fonts are served by Bunny Fonts without cookies or IP logging. Revisit this if you switch back to a logging font host.