They could, but I'm not sure that would change a lot: I expect the server to be a dumb fileserver. Even if I could see what it logs, I'm not sure I would trust the Google instance to not have more logging. I'm pretty sure they don't answer because they *do* log huge lots.
-
-
What about "Google Fonts acts as a "data controller" for any personal data that Google processes in connection with your use of Google Fonts web and Android APIs" doesn't completely put the matter to rest?
1 reply 0 retweets 1 like -
I guess it means something clear if you work within Google :) The best way I understand this statement is “yup we do indeed use your fonts loading across the web as beacons to track you through fingerprinting”. Just outsourcing policy to Google's main
#privacy policy. cc@aral1 reply 1 retweet 6 likes -
I believe Dave should link to some documentation about the implication of Google Fonts acting as a "data controller", e.g. https://www.gdpreu.org/the-regulation/key-concepts/data-controllers-and-processors/ … (which puts the matter to rest for me :-)
1 reply 0 retweets 1 like -
Replying to @Louis_Remi @davelab6 and
I've read that several times already. I read “Google Fonts has its own set of rules for managing your data interacting with Google products”. The issue raised on GitHub is that we don't know which data, what for, nor retention period. So I assume Google's. What do you read in it?
1 reply 0 retweets 1 like -
Replying to @matti_sg @Louis_Remi and
You say "your data," as if you are the DC. Why do you believe you are the DC?
2 replies 0 retweets 0 likes -
Replying to @davelab6 @Louis_Remi and
Look Dave, I appreciate you try to give hints and you're tongue-bound. What about, rather than speaking in riddles, creating a fake account, or using a side channel (DM, LinkedIn, email, video call…) to brief one of us properly, and use that to spread your message clearly?
1 reply 0 retweets 0 likes -
Replying to @matti_sg @Louis_Remi and
Honestly I believe I'm being as clear as possible. As a webmaster, then for data I collect & control, I have responsibility to EU users under gdpr. For data I don't collect and do not control, what are my responsibilities?
1 reply 0 retweets 0 likes -
Replying to @davelab6 @Louis_Remi and
Okay, thanks. That's clearer indeed. I understand: it might not be legal failure on my side to force my visitors to send their personal data to Google just to display a font. Only moral failure and lack of understanding of the spirit of the law. Can't wait for court challenge
1 reply 0 retweets 0 likes -
One not tied to a company that makes its money by tracking people and profiling them, quite possibly, yes. Is Alphabet, Inc./Google moral? No. It’s a surveillance capitalist.
-
-
Free software, free society
0 replies 0 retweets 0 likesThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.