Repository navigation
Self-host the website fonts instead of loading Google Fonts #1075
Description
website/src/root.tsx loads Ubuntu Mono and Ubuntu Sans Mono from fonts.googleapis.com on every page of dormouse.sh, so each visit sends the visitor's IP address and browser information to Google. Some EU courts have treated that transfer as a GDPR violation, and it is the only third-party request the marketing site makes.
Serve both fonts from dormouse.sh instead (for example the @fontsource packages, subset to what the site uses), and remove the preconnect hints to Google.
When this lands:
- Delete the Google Fonts sentence from the website paragraph in
website/src/pages/Privacy.tsx→ "Who we are and what this covers". - Add the font packages to the dependency disclosure (
node website/scripts/generate-deps.js) if they count as shipped dependencies.
Blocks #1074: the Privacy policy made effective in #997 discloses the Google Fonts request, and paid launch should not depend on it.
Activity
Make Hosted policies effective and add standard terms
dormouse-bot commentedon Oct 8, 2026
#1077 serves both fonts from dormouse.sh through the
@fontsourcepackages and removes the Google stylesheet andpreconnecthints. A production build of the site makes no reference togoogleapisorgstatic, and CI is green.You listed two follow-ups. Neither needed a change in this PR:
generate-deps.jsexcludesdormouse-websiteas visitor browser code with no installed artifact, so the font packages aren't shipped dependencies.Privacy.tsx, not onmain. It should come out of whichever of Privacy and Terms for paid Hosted #997 and Serve website fonts locally and defer content until fonts load #1077 merges second.