MyFonts
MyFonts is a web font hosting service by Monotype that delivers fonts from a content delivery network and counts pageviews for licensing, transmitting visitor IP and referrer to the United States.
What does MyFonts do?
What MyFonts is
MyFonts is a web font hosting service operated by Monotype, a company based in the United States. When a website embeds a MyFonts web font kit, the fonts are delivered from a content delivery network so they load quickly for visitors anywhere.
To enforce licensing, the service counts pageviews each time a page that uses the font kit is loaded, which involves contact with Monotype infrastructure.
What data and cookies it collects
When a font is loaded, the visitor browser sends its IP address and the referring page address to a tracking service so a pageview can be counted against the licence. According to Monotype, the IP address is used to count pageviews and is not stored or further processed by the provider for other purposes.
The font delivery itself is cookieless, but the IP address is personal data under the GDPR, so the transmission still constitutes processing that must be justified.
GDPR and ePrivacy implications
Loading fonts from an external United States service exposes the visitor IP address to a third country, which European courts and regulators have treated as a sensitive point, as shown by decisions on external Google Fonts. The website operator is the controller and must be able to justify the transfer.
Because the IP is read from the device on each request, the safest approach treats external font loading as requiring user consent rather than relying solely on legitimate interest.
Consent requirements
Given the transfer of IP data abroad, many European operators ask for consent before loading MyFonts from the external service. The consent banner should explain that an external font provider in the United States will receive the IP address, and it must offer a genuine option to refuse.
Where consent is refused, the site should fall back to locally hosted fonts so the page still renders without contacting the external service.
International data transfers
The IP address and referrer are transmitted to the United States. Such transfers should rely on the EU US Data Privacy Framework where Monotype is certified, or on Standard Contractual Clauses together with a transfer impact assessment that considers United States surveillance laws.
Practical compliance steps
Prefer self hosting the licensed font files on your own server or European CDN so no visitor IP leaves to the United States. If you keep the external service, gate it behind consent, verify the transfer mechanism, and update your privacy notice to name Monotype and describe the IP transfer.
Keep records of your transfer assessment and your consent logs so you can demonstrate accountability if a supervisory authority asks.
MyFonts and the GDPR
MyFonts is classified as “Essential”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent under Art. 6(1)(a) GDPR is the safer basis where IP data is sent abroad, with legitimate interest under Art. 6(1)(f) GDPR claimed by the provider for licensing measurement
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive
Impact assessment (DPIA)
A DPIA is strongly advisable for MyFonts web font hosting because the service transmits visitor IP addresses to a provider in the United States for pageview counting. The combination of an international transfer and tracking on every page view raises the risk profile, even though the provider states it does not store the IP for other purposes.
Sample text for your banner
This site can load fonts from MyFonts by Monotype, which sends your IP address and the page address to a service in the United States to count pageviews for licensing. We only load these external fonts with your consent, which you can refuse or withdraw at any time, in which case locally hosted fonts are used.
What MyFonts sets and contacts
- Tracking method
- CDN request
- Server location
- United States
- Cookieless mode available
- Yes
- Data transferred outside the EU
- Font files are served from a content delivery network and pageview tracking transmits the visitor IP address and referrer to the United States under the EU US Data Privacy Framework and Standard Contractual Clauses.
Cookies set (4)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| monotype_session | Strictly necessary | Session | Maintains the session on the Monotype and MyFonts web properties. |
| mt_consent | Functional | 1 year | Stores the cookie consent choices made on the provider website. |
| mt_prefs | Functional | 6 months | Remembers display and language preferences on the provider website. |
| _mt_ga | Analytics | 13 months | Measures usage of the provider website for reporting purposes. |
Third-party domains contacted (4)
myfonts.comhello.myfonts.netfast.fonts.netmonotype.com
Frequently asked questions about MyFonts
Can't find your question? Write to us, we answer fast.
Which cookies does MyFonts set?
The MyFonts web font hosting and pageview tracking are cookieless, since the service identifies pageviews through the request rather than a stored cookie. The myfonts.com website itself uses session, preference and analytics cookies, but these are separate from the embedded font kit on your site.
Is consent required for MyFonts?
Because loading the external fonts sends the visitor IP address to the United States, the safest approach is to ask for consent before the font request. If you self host the licensed font files instead, no IP leaves to the provider and the consent question for fonts disappears.
What is the legal basis for processing with MyFonts?
Monotype relies on legitimate interest under Art. 6(1)(f) GDPR for pageview counting, but for the website operator the international transfer makes consent under Art. 6(1)(a) GDPR the more defensible basis. Self hosting avoids the question by keeping data within the EU.
Does MyFonts transfer data outside the EU, to the US in particular?
Yes, when fonts are loaded from the external service the visitor IP address and referrer are transmitted to the United States. Such transfers should rely on the EU US Data Privacy Framework or on Standard Contractual Clauses with a transfer impact assessment.
Is a DPIA needed for MyFonts?
A DPIA is strongly advisable because the service combines an international transfer of IP data with tracking on every page view. Documenting the risk and the chosen safeguards helps demonstrate that the transfer has been properly assessed.
How do I implement MyFonts in a compliant way?
The cleanest approach is to self host the licensed font files on your own server or a European CDN so no visitor IP reaches the United States. If you keep the external service, gate it behind consent, verify the transfer mechanism, and describe the IP transfer in your privacy notice.
What are the alternatives to MyFonts?
Alternatives include self hosting the same licensed fonts, using European web font providers, or relying on system and open source fonts that load without any external request. These options reduce or remove the transfer of visitor IP data.
How do I update my cookie policy for MyFonts?
Since the embedded fonts are cookieless, focus your privacy notice on the IP transfer to Monotype in the United States, its purpose and its legal basis, rather than on cookies. If you self host instead, state that fonts are served locally and that no data is sent to the provider.
emfont
Emfont is a web font service providing access to a curated library of high-quality typefaces optimized for digital use. It delivers fonts through a global CDN with smart caching and efficient loading to minimize performance impact. Emfont supports variable fonts, subsetting, and display optimization, helping designers create beautiful typography while maintaining fast page loads. With easy integration and broad browser support, Emfont enhances aesthetics.
Google Font API
Google Font API is a web font service providing access to a curated library of high-quality typefaces optimized for digital use. It delivers fonts through a global CDN with smart caching and efficient loading to minimize performance impact. Google Font API supports variable fonts, subsetting, and display optimization, helping designers create beautiful typography while maintaining fast page loads. With easy integration and broad browser support, Google Font API enhances aesthetics.
Cloud.typography
Cloud.typography is a web hosting and cloud infrastructure provider delivering reliable, scalable hosting solutions for websites and applications of all sizes. It offers shared, VPS, and dedicated server options with SSD storage, global CDN, and automated backups. Cloud.typography provides one-click deployment, managed databases, and 24/7 monitoring. With high uptime guarantees and developer-friendly tools, Cloud.typography ensures optimal performance at scale.
Hoefler&Co
Hoefler&Co is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Hoefler&Co supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Hoefler&Co ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Adobe Fonts (Typekit)
Adobe Fonts (Typekit) is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Adobe Fonts (Typekit) is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Adobe Fonts (Typekit) offers reliable solutions that scale with organizational needs and evolving web standards.
Fonts.com
Fonts.com is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Fonts.com is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Fonts.com offers reliable solutions that scale with organizational needs and evolving web standards.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.