In January, 2022 a German court ruled that a website owner should pay a € 100,- fine, because embedded Google Fonts were used, essentially transferring the user’s personal data (IP address) without the user’s prior consent.
What’s embedding?
When an external (i.e. loaded from another server, besides your own) resource is embedded into a webpage, it basically means that the resource behaves as if it’s loaded from the same server hosting the webpage.
Why is using embedded resources in breach of GDPR?
Because of the way the internet works. When a browser (i.e. computer) requests a file (e.g. an image or a font file), the server needs the IP address of that computer to send it back. All these requests (including the IP address) are logged in a so-called access.log.
Once this IP address leaves the European Union, your website is violating the GDPR.
What does this plugin do?
GDPRess scans your homepage for 3rd party scripts (JS) and stylesheets (CSS), and:
- Allows you to download or exclude them from downloading,
- Parses the stylesheets for loaded font files, downloads them, and rewrites the stylesheet to use the local copies,
- Makes sure the local copies of each script/stylesheet are used in your site’s frontend.
In short, it makes sure no requests are made to external/embedded/3rd party scripts and stylesheets.
- Upload the plugin files to the
/wp-content/plugins/gdpr-pressdirectory, or install the plugin through the WordPress plugins screen directly. - Activate the plugin through the ‘Plugins’ screen in WordPress
- Use the Settings -> Optimize Google Fonts screen to configure the plugin
-
Can I remove/preload stylesheets and/or scripts with this plugin?
-
No, because there are other plugins (like Asset Cleanup or Autoptimize) that are already excellent at that.
-
GDPRess downloaded a stylesheet/script, but I’m still seeing requests to font files loaded by the stylesheet?
-
GDPRess parses the stylesheet for defined src urls. But if it somehow missed it, I’d love to hear about that, because that might be a bug. Please head over to the support forum and submit a ticket, and include the full URL to the external stylesheet.
There are no reviews for this plugin.
“GDPRess | Eliminate External (3rd Party) Requests” is open source software. The following people have contributed to this plugin.
Contributors
1.0.2
- Added: tooltip next to success message.
- Fixed: tooltip-icon line height.
1.0.1
- Fixed: Conflicts with several caching/optimization plugins:
- Autoptimize
- WP Rocket
- W3 Total Cache
- WP Optimize
- Fixed: several warnings and notices.
1.0
Source link