FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Fonts

Fonts.com (Monotype Web Fonts)

Essential

Fonts.com is the consumer brand of Monotype Imaging for high quality professional typography served as web fonts. It hosts thousands of typefaces including Helvetica, Frutiger, Univers, Avenir, Centaur, Sabon, Neue Haas Grotesk and FF DIN. Designers embed the fonts on their website with a JavaScript snippet (mtiFontTrackingCode.js) or a CSS link to fast.fonts.net. Each page view that requests a font transmits the visitor IP to Monotype servers, which raises the same kind of GDPR concern as Google Fonts in the famous Bonn Regional Court case.

Block Fonts.com (Monotype Web Fonts) until consentScan my site
Overview

What does Fonts.com (Monotype Web Fonts) do?

What Fonts.com does and how it appears on a website

Fonts.com is the consumer brand of Monotype Imaging Inc., one of the largest type foundries in the world. The service exposes Monotype catalogue typefaces (Helvetica, Frutiger, Univers, Avenir, Sabon, Neue Haas Grotesk, FF DIN, Centaur and many more) for licensed use as web fonts. Designers create projects on fonts.com, copy the resulting snippet, paste a script tag that loads mtiFontTrackingCode.js or a CSS link that fetches the @font-face declarations from fast.fonts.net, and the typeface renders on the website.

Cookies and data collected by Fonts.com

Fonts.com tracks usage to honour the page view licensing model. The mtiFontTrackingCode.js script fires a beacon request on every page view, transmitting the project key, the visitor IP, User-Agent, referrer and the requested font families. The CSS only variant transmits the same information without the beacon. The service does not store marketing cookies, but a session identifier may be set on .fonts.net for cache control and abuse detection.

GDPR and ePrivacy implications

Loading a font from a third party server transmits the visitor IP address to the provider. The Bonn Regional Court ruling on Google Fonts of 20 January 2022 confirmed that this transmission requires a clear legal basis or prior consent. Although the ruling targeted Google, its reasoning applies equally to Fonts.com, Adobe Fonts and any other US hosted web font service. Strict consent is the safer route in Germany, France and Spain.

International data transfers

Monotype Imaging Inc. is a US company certified under the EU-US Data Privacy Framework. The Monotype DPA, available for enterprise customers, includes Standard Contractual Clauses for jurisdictions outside the framework. Fonts.com runs on AWS infrastructure mostly in US regions, with Akamai edge nodes for delivery.

Consent and legal basis

For European websites, the prudent approach is to gather opt-in consent before requesting Fonts.com files, or to self-host the typefaces in the @font-face format after acquiring the appropriate Monotype self-hosting licence. Legitimate interest can be argued for design critical typography, but the lack of user benefit makes the balance hard to defend.

Practical compliance steps

Negotiate a self-hosting Monotype licence, download the WOFF2 files, host them on your own EU origin or an EU CDN, write your own @font-face CSS declarations, and remove the call to mtiFontTrackingCode.js. Where Fonts.com must remain hosted by Monotype, integrate the script tag and the CSS link into the Consent Management Platform so they only fire after explicit opt-in, and add a system font fallback to keep the layout readable when consent is refused.

Compliance

Fonts.com (Monotype Web Fonts) and the GDPR

Fonts.com (Monotype Web Fonts) is classified as “Essential”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent under Article 6(1)(a) GDPR or a documented legitimate interest (Article 6(1)(f)) is required. After the Bonn Regional Court ruling on Google Fonts, loading typography from a US third party server that processes the visitor IP is considered as transmitting personal data and requires a lawful basis the user can verify.
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive, German TTDSG / TDDDG, EU-US Data Privacy Framework, Bonn Regional Court ruling on Google Fonts, French CNIL guidelines on third party scripts

Impact assessment (DPIA)

A DPIA is rarely needed for typography alone. A focused transfer impact assessment on Monotype Imaging Inc. is recommended, documenting the data exchanged (IP, User-Agent, referrer, font family), the EU-US Data Privacy Framework certification, the option to self-host the font files and the relevant Monotype enterprise DPA.

Sample text for your banner

This website uses Fonts.com web fonts from Monotype. When your browser loads a font, your IP address, User-Agent and the page URL are transmitted to Monotype servers in the United States under the EU-US Data Privacy Framework. By clicking Accept, you authorise this transfer. You can also Reject and the website will fall back to a system font installed on your device.
Cookies and trackers

What Fonts.com (Monotype Web Fonts) sets and contacts

Tracking method
Web fonts service from Monotype. Delivers WOFF2 and WOFF font files through a CDN, served by a JavaScript snippet (mtiFontTrackingCode.js) or a direct CSS link. Logs each font request and may set a tracking cookie for usage based licensing.
Server location
Global CDN with EU edges. Origin operated by Monotype Imaging Inc. on AWS infrastructure, primarily in the United States. Some assets are mirrored on Akamai.
Data transferred outside the EU
Operated by Monotype Imaging Inc. (Woburn, Massachusetts, USA). The Fonts.com service is the European facing brand of Monotype Web Fonts. Per request data (IP, User-Agent, referrer, font family) flows to Monotype US infrastructure. Monotype is certified under the EU-US Data Privacy Framework and offers a Data Processing Addendum based on Standard Contractual Clauses for enterprise customers.

Cookies set (2)

NameTypeDurationPurpose
mti_sessionHTTP cookieSessionSession identifier set on .fonts.net for cache control and abuse detection.
monotype_unique_idHTTP cookie1 yearTracks unique users for the page view based licensing model.

Third-party domains contacted (4)

  • fonts.com
  • fast.fonts.net
  • fonts.net
  • monotype.com
Questions

Frequently asked questions about Fonts.com (Monotype Web Fonts)

Can't find your question? Write to us, we answer fast.

What cookies does Fonts.com set?

Fonts.com primarily sets a session identifier on .fonts.net for cache control and may set monotype_unique_id (1 year) for the page view based licensing model. The main privacy impact is the transmission of the visitor IP to Monotype on every page load, not the cookies themselves.

Do I need consent for Fonts.com?

Yes, the safer path for European websites is to gather opt-in consent before requesting Fonts.com files, given the Bonn Google Fonts ruling logic. Self-hosting the WOFF2 files after a Monotype self-hosting licence avoids the consent question entirely.

What is the legal basis?

Consent under Article 6(1)(a) GDPR is the safer route. Legitimate interest under Article 6(1)(f) is hard to defend because the user gets no specific benefit from the transfer of their IP.

Does Fonts.com transfer data to the US?

Yes. Monotype Imaging Inc. is a US company, operates Fonts.com on AWS US regions and is certified under the EU-US Data Privacy Framework. Self-hosting the fonts on an EU server eliminates the transfer.

Is a DPIA required?

No, typography alone does not justify a full DPIA. A short transfer impact assessment focused on Monotype is enough.

How do I implement Fonts.com compliantly?

Negotiate a Monotype self-hosting licence, download the WOFF2 files, host them on your EU origin or EU CDN, write your own @font-face declarations and remove the mtiFontTrackingCode.js script. If self-hosting is not possible, integrate the script and CSS link into the Consent Management Platform with a system font fallback.

Are there alternatives to Fonts.com?

For free EU friendly fonts: Google Fonts self-hosted, Bunny Fonts (EU mirror of Google Fonts), Fontsource, the European Web Type Initiative. For paid alternatives: Adobe Fonts (similar privacy profile), MyFonts (Monotype subsidiary), self-hosting from a foundry such as Klim, Production Type, Typotheque, Schick Toikka.

How do I update my cookie policy for Fonts.com?

List Monotype Imaging Inc. as a processor, describe the IP and User-Agent transmission, mention the EU-US Data Privacy Framework, link to the Monotype privacy policy and explain the optional self-hosting alternative.

Same category

More services: Fonts

See the whole category

MyFonts

MyFonts is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. MyFonts integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, MyFonts helps organizations maintain robust websites that meet user expectations and technical requirements.

Essential

Google Font API

Google Font API is a web font service providing access to a curated library of high-quality typefaces optimized for digital use. It delivers fonts through a global CDN with smart caching and efficient loading to minimize performance impact. Google Font API supports variable fonts, subsetting, and display optimization, helping designers create beautiful typography while maintaining fast page loads. With easy integration and broad browser support, Google Font API enhances aesthetics.

Essential

Poppins

Poppins is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Poppins provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Poppins helps deliver the right message to the right audience at the right time.

Fonts

Adobe Fonts (Typekit)

Adobe Fonts (Typekit) is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Adobe Fonts (Typekit) is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Adobe Fonts (Typekit) offers reliable solutions that scale with organizational needs and evolving web standards.

Essential

FontServer

FontServer is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. FontServer integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, FontServer helps organizations maintain robust websites that meet user expectations and technical requirements.

Essential

emfont

Emfont is a web font service providing access to a curated library of high-quality typefaces optimized for digital use. It delivers fonts through a global CDN with smart caching and efficient loading to minimize performance impact. Emfont supports variable fonts, subsetting, and display optimization, helping designers create beautiful typography while maintaining fast page loads. With easy integration and broad browser support, Emfont enhances aesthetics.

Essential

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site