FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Fonts

Poppins (Google Font)

UnclassifiedOfficial website

Poppins is a popular open-source typeface distributed via Google Fonts. When loaded from the Google Fonts CDN, visitor IP addresses are transmitted to Google's US servers, a transfer of personal data that German courts have ruled violates GDPR without a lawful basis. The GDPR-compliant solution is to self-host the Poppins font files on your own server, eliminating the Google transfer entirely while maintaining the same visual appearance.

Block Poppins (Google Font) until consentScan my site
Overview

What does Poppins (Google Font) do?

What is Poppins?

Poppins is a geometric sans-serif typeface designed by Indian Type Foundry and Jonny Pinhorn, published as open-source under the SIL Open Font License. It is one of the most popular fonts on Google Fonts. When web designers reference Poppins via a Google Fonts link tag in HTML, the browser makes a request to Google's CDN servers to download the font files, transmitting the visitor's IP address in the process.

The Google Fonts GDPR problem

In January 2022, the Landgericht München I (Munich Regional Court) issued a landmark ruling finding that loading Google Fonts via the CDN violates GDPR because it transmits visitor IP addresses to Google's US servers without a lawful basis. The court awarded a symbolic 100 EUR fine to the plaintiff and ordered the website to stop using Google Fonts via CDN. Multiple German data protection authorities have since confirmed that dynamic Google Fonts loading requires either consent or self-hosting as the compliant approach.

The simple solution: self-hosting

Self-hosting Poppins is straightforward and eliminates all Google Fonts GDPR concerns. Download the Poppins font files from Google Fonts or fonts.google.com, host them on your own server or CDN, and reference them in your CSS with @font-face declarations. Tools like google-webfonts-helper (gwfh.mranftl.com) automate this process. Once self-hosted, no data is sent to Google and no GDPR issues arise from font loading.

If you must use the Google Fonts CDN

If self-hosting is not feasible, loading Google Fonts dynamically after explicit consent is an alternative, though it degrades the user experience as the site will display a fallback font until consent is given and the font loads. A cookie consent banner option for fonts specifically is unusual and creates user experience complexity. Self-hosting remains the recommended approach.

Practical compliance steps

Download Poppins font files and host on your own infrastructure. Replace the Google Fonts link tag with @font-face CSS rules pointing to your hosted files. Remove the Google Fonts preconnect link tags. Verify no Google Fonts requests appear in browser developer tools. This single change resolves the GDPR font loading issue entirely.

Compliance

Poppins (Google Font) and the GDPR

Legal basis
Legitimate interest (Art. 6(1)(f)) may apply for CDN font loading, but German courts (Landgericht München I) ruled in 2022 that loading Google Fonts without consent violates GDPR by transmitting IP addresses to Google without a lawful basis. Self-hosting is the recommended compliant approach.
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive

Impact assessment (DPIA)

A DPIA is not required for self-hosted Poppins. For CDN-loaded Google Fonts, the German court ruling and data protection authority guidance suggest the transfer is not compliant without consent, making self-hosting the recommended approach.

Sample text for your banner

This website loads the Poppins font from Google Fonts CDN. Google may process your IP address on US servers when loading this font. Please accept to load the font from Google's servers, or we will use a system font instead.
Cookies and trackers

What Poppins (Google Font) sets and contacts

Tracking method
Google Fonts API request, IP address logging by Google servers when loaded from CDN
Server location
United States (Google Fonts CDN infrastructure)
Cookieless mode available
Yes
Data transferred outside the EU
Poppins is a font distributed via Google Fonts. When loaded from the Google Fonts CDN, visitor IP addresses are sent to and logged by Google servers in the US. This constitutes a transfer of personal data under GDPR. Self-hosting the font eliminates this transfer entirely.

Cookies set (1)

NameTypeDurationPurpose
NIDpersistent6 monthsGoogle NID cookie set when loading fonts from Google Fonts CDN, eliminated by self-hosting Poppins

Third-party domains contacted (2)

  • fonts.googleapis.com
  • fonts.gstatic.com
Questions

Frequently asked questions about Poppins (Google Font)

Can't find your question? Write to us, we answer fast.

Does loading Poppins from Google Fonts violate GDPR?

According to a January 2022 Munich Regional Court ruling and guidance from German data protection authorities, yes. Loading Google Fonts via the CDN transmits visitor IP addresses to Google's US servers without a lawful basis, violating GDPR.

What is the GDPR-compliant solution for Poppins?

Self-host the Poppins font files on your own server. Download the font from fonts.google.com or use a tool like google-webfonts-helper, and serve the files from your own domain using @font-face CSS rules.

Can I use consent to justify loading Poppins from Google CDN?

Technically yes, but it creates a poor user experience as the font will not load until consent is given, causing a font flash. Self-hosting is far simpler and provides the same visual result with no compliance concerns.

Does Poppins itself (the font design) have GDPR implications?

No. The font design is an artistic work. GDPR implications arise only from how the font files are delivered, specifically from loading via Google's CDN which transmits IP addresses to Google.

How do I self-host Poppins?

Download font files from fonts.google.com. Add @font-face declarations in your CSS pointing to the hosted files. Remove the Google Fonts link tag and preconnect tags from your HTML. Verify in browser developer tools that no requests go to fonts.googleapis.com or fonts.gstatic.com.

Does self-hosting Poppins affect performance?

With proper implementation, self-hosted fonts can actually load faster than CDN fonts because they are served from your own server without a cross-origin request. Use font-display: swap in @font-face to ensure text is visible during loading.

Do I need to update my privacy policy after self-hosting Poppins?

No. Once self-hosted, no data is sent to Google. There is nothing to disclose in your privacy policy regarding the font. If you previously disclosed Google Fonts usage, you can remove that entry after self-hosting.

What other Google Fonts face the same GDPR issue?

All fonts loaded from the Google Fonts CDN (fonts.googleapis.com) have the same issue. The solution is the same for all: self-host the font files. Popular Google Fonts like Roboto, Inter, Lato, and Open Sans all need to be self-hosted for GDPR compliance.

Same category

More services: Fonts

See the whole category

MyFonts

MyFonts is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. MyFonts integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, MyFonts helps organizations maintain robust websites that meet user expectations and technical requirements.

Essential

Symbolset

Symbolset is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Symbolset integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Symbolset helps organizations maintain robust websites that meet user expectations and technical requirements.

Fonts

Hoefler&Co

Hoefler&Co is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Hoefler&Co supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Hoefler&Co ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Fonts

Adobe Fonts (Typekit)

Adobe Fonts (Typekit) is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Adobe Fonts (Typekit) is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Adobe Fonts (Typekit) offers reliable solutions that scale with organizational needs and evolving web standards.

Essential

IconScout

IconScout is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. IconScout is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, IconScout offers reliable solutions that scale with organizational needs and evolving web standards.

Essential

Adobe Fonts

Adobe Fonts is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Adobe Fonts is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Adobe Fonts offers reliable solutions that scale with organizational needs and evolving web standards.

Essential

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site