-
Notifications
You must be signed in to change notification settings - Fork 4.9k
Is SemanticUI leaking information to google by hardcoding google fonts in the CSS file? #7075
Description
Hi,
I am not sure where this issue should be posted, so I am adding it as a general issue here. A German court fined an unidentified website €100 ($110, £84) for violating EU privacy law by importing a Google-hosted web font. See here for details.
I recently had to dive into semantic.css and noted that Google fonts is hardcoded into this file on line 11 :
@import url('https://fonts.googleapis.com/css?family=Lato:400,700,400italic,700italic&subset=latin');
I am using npm, so it might be the package maintainer there that has made the decision to hardcode google fonts. So I took a look for the use of google fonts within your repository. There does seem to be hardcoded values to Google fonts here.
The point of this issue is just to make the project aware that this is a potential problem for users of Semantic UI. If this ruling stands, users of Semantic UI may be liable for privacy fines for breach of GDPR, and people considering the use of Semantic UI should perhaps be made aware of this. Unfortunately, I have no fix or other way that I can help, as my CSS/js abilities are rather limited.