October 1, 2022

WordPress aims to host fonts locally for the default themes in version 6.2

How did the choice to host fonts locally to make WordPress more GDPR compliant?

WordPress Local Fonts GDPR

In June 2022, the WordPress.org theme team began strongly urging theme authors to switch to locally hosted web fonts, following a German court case, which fined a website owner for violating the GDPR using webfont hosted by Google. For years, theme authors queue Google Fonts from Google's CDN for better performance, but this method exposes visitors' IP addresses.

Leaving aside our considerations regarding the nonsense that is the GDPR and the various technical / legal references on which it is based, it must be said that the problem to date undefined has created problems for everyone including WordPress.

The theme team has warned that local font hosting guidelines will change immanently, and many theme authors have moved to comply before it becomes a requirement.

Un ticket Google font grouping with WordPress legacy default themes had patches and was on track to be included in WordPress 6.1 in November. WordPress contributor Hendrik Luehrsen he asked more eyes on the ticket, saying that "directly affects the main WordPress audience in Germany". It reported that users in Germany were still receiving emails threatening fines for using Google-uploaded fonts.

Primary WordPress client Tonya Mork he suggested to explore the release of the updated version of each theme separately from WordPress 6.1.

When each theme is ready, drop it into the wp.org theme repository, users can then upgrade to get locally hosted fonts before WP 6.1 is released.

Mork said.

This changed the direction of the ticket, and with more scrutiny, contributors found that patches could take a little more work.

“Creating new versions of the theme for this specific change could be helpful when they are ready “Said Stephen Bernhardt. " The use of locally hosted fonts it is already recommended, but we must correct our themes before we can make it a requirement for others ”. He presented a list of issues and potential improvements after reviewing the patches and contributors are working on a better approach.

WordPress core committer David Baumwald has changed milestone to 6.2 , as Beta 2 for 6.1 was released yesterday and the ticket still needs a final direction and patch.

“Even though I understand the problem, it's still sad to see,” Luehrsen said. "This is still a serious problem in Germany (and other GDPR territories), as users with active Google Fonts are currently targeted by people who exploit the law ".

Luehrsen turned to Twitter for to comment his disappointment with the ticket missing the window for 6.1.

This is why WordPress will likely lose relevance. Real users get hurt here, but they are in GDPR territories and that doesn't seem to matter. Could I have done more? Probably. But it's kind of sad to see how quickly the momentum on that ticket faded. If Squarespace, Wix, and the like start marketing privacy against WordPress, we're screwed in the GDPR countries.

In the meantime, those using the default WordPress themes can use a plugin like Local Google Fonts o OMGF | GDPR / DSVGO compliant, faster Google Fonts to host fonts locally.

Users can also switch to bunny fonts , an open source, privacy-focused web font platform with no tracking or registration, fully GDPR compliant. Bunny Fonts is compatible with Google Fonts CSS API v1, so it can work as a drop-in replacement. The plug-in Replace Google Fonts with Bunny Fonts allows users to do this easily without changing the theme code.

Contributors are working to have fully GDPR-compliant default WordPress themes ready for WordPress 6.2, scheduled for early 2023.

Do you have doubts? Don't know where to start? Contact us!

We have all the answers to your questions to help you make the right choice.

Chat with us

Chat directly with our presales support.

0256569681

Contact us by phone during office hours 9:30 - 19:30

Contact us online

Open a request directly in the contact area.

DISCLAIMER, Legal Notes and Copyright. RedHat, Inc. holds the rights to Red Hat®, RHEL®, RedHat Linux®, and CentOS®; AlmaLinux™ is a trademark of the AlmaLinux OS Foundation; Rocky Linux® is a registered trademark of the Rocky Linux Foundation; SUSE® is a registered trademark of SUSE LLC; Canonical Ltd. holds the rights to Ubuntu®; Software in the Public Interest, Inc. holds the rights to Debian®; Linus Torvalds holds the rights to Linux®; FreeBSD® is a registered trademark of The FreeBSD Foundation; NetBSD® is a registered trademark of The NetBSD Foundation; OpenBSD® is a registered trademark of Theo de Raadt; Oracle Corporation holds the rights to Oracle®, MySQL®, MyRocks®, VirtualBox®, and ZFS®; Percona® is a registered trademark of Percona LLC; MariaDB® is a registered trademark of MariaDB Corporation Ab; PostgreSQL® is a registered trademark of PostgreSQL Global Development Group; SQLite® is a registered trademark of Hipp, Wyrick & Company, Inc.; KeyDB® is a registered trademark of EQ Alpha Technology Ltd.; Typesense® is a registered trademark of Typesense Inc.; REDIS® is a registered trademark of Redis Labs Ltd; F5 Networks, Inc. owns the rights to NGINX® and NGINX Plus®; Varnish® is a registered trademark of Varnish Software AB; HAProxy® is a registered trademark of HAProxy Technologies LLC; Traefik® is a registered trademark of Traefik Labs; Envoy® is a registered trademark of CNCF; Adobe Inc. owns the rights to Magento®; PrestaShop® is a registered trademark of PrestaShop SA; OpenCart® is a registered trademark of OpenCart Limited; Automattic Inc. holds the rights to WordPress®, WooCommerce®, and JetPack®; Open Source Matters, Inc. owns the rights to Joomla®; Dries Buytaert owns the rights to Drupal®; Shopify® is a registered trademark of Shopify Inc.; BigCommerce® is a registered trademark of BigCommerce Pty. Ltd.; TYPO3® is a registered trademark of the TYPO3 Association; Ghost® is a registered trademark of the Ghost Foundation; Amazon Web Services, Inc. owns the rights to AWS® and Amazon SES®; Google LLC owns the rights to Google Cloud™, Chrome™, and Google Kubernetes Engine™; Alibaba Cloud® is a registered trademark of Alibaba Group Holding Limited; DigitalOcean® is a registered trademark of DigitalOcean, LLC; Linode® is a registered trademark of Linode, LLC; Vultr® is a registered trademark of The Constant Company, LLC; Akamai® is a registered trademark of Akamai Technologies, Inc.; Fastly® is a registered trademark of Fastly, Inc.; Let's Encrypt® is a registered trademark of the Internet Security Research Group; Microsoft Corporation owns the rights to Microsoft®, Azure®, Windows®, Office®, and Internet Explorer®; Mozilla Foundation owns the rights to Firefox®; Apache® is a registered trademark of The Apache Software Foundation; Apache Tomcat® is a registered trademark of The Apache Software Foundation; PHP® is a registered trademark of the PHP Group; Docker® is a registered trademark of Docker, Inc.; Kubernetes® is a registered trademark of The Linux Foundation; OpenShift® is a registered trademark of Red Hat, Inc.; Podman® is a registered trademark of Red Hat, Inc.; Proxmox® is a registered trademark of Proxmox Server Solutions GmbH; VMware® is a registered trademark of Broadcom Inc.; CloudFlare® is a registered trademark of Cloudflare, Inc.; NETSCOUT® is a registered trademark of NETSCOUT Systems Inc.; ElasticSearch®, LogStash®, and Kibana® are registered trademarks of Elastic NV; Grafana® is a registered trademark of Grafana Labs; Prometheus® is a registered trademark of The Linux Foundation; Zabbix® is a registered trademark of Zabbix LLC; Datadog® is a registered trademark of Datadog, Inc.; Ceph® is a registered trademark of Red Hat, Inc.; MinIO® is a registered trademark of MinIO, Inc.; Mailgun® is a registered trademark of Mailgun Technologies, Inc.; SendGrid® is a registered trademark of Twilio Inc.; Postmark® is a registered trademark of ActiveCampaign, LLC; cPanel®, LLC owns the rights to cPanel®; Plesk® is a registered trademark of Plesk International GmbH; Hetzner® is a registered trademark of Hetzner Online GmbH; OVHcloud® is a registered trademark of OVH Groupe SAS; Terraform® is a registered trademark of HashiCorp, Inc.; Ansible® is a registered trademark of Red Hat, Inc.; cURL® is a registered trademark of Daniel Stenberg; Facebook®, Inc. owns the rights to Facebook®, Messenger® and Instagram®. This site is not affiliated with, sponsored by, or otherwise associated with any of the above-mentioned entities and does not represent any of these entities in any way. All rights to the brands and product names mentioned are the property of their respective copyright holders. All other trademarks mentioned are the property of their respective registrants.

JUST A MOMENT !

Have you ever wondered if your hosting sucks?

Find out now if your hosting provider is hurting you with a slow website worthy of 1990! Instant results.

Close the CTA
Back to top