@ThisIsMissEm
@unpkg Yes. IP addresses are personal identifiable
information, and technically sites are forwarding this to third parties without
user consent, if they fetch resources from those parties. One could argue that
certain third-parties do not store logs, but certainly not Google.
2 replies
@ThisIsMissEm
@unpkg There is a limitiation in this summary
(https://www.ra-plutte.de/lg-muenchen-dynamische-einbindung-google-web-fonts-ist-dsgvo/)
... which could mean that if a third-party service has NO static variant, like
@unpkg, where the whole point is using dynamic access, websites might argue that
it's technically neccessary, and therefore allowed.
@ThisIsMissEm
@unpkg In the ruling Google is also specifically
mentioned as having demonstrated interest in collecting user data. So
third-parties that e.g. are paid and have a zero tracking policy should be fine.