adyen-web icon indicating copy to clipboard operation
adyen-web copied to clipboard

Published 20 hours ago • verified publisher icon Adyen

Checkout is loading Google Fonts (Potential for GDPR Violation?)

Open amenk opened this issue 1 year ago • 2 comments

Copied from / follow up from https://github.com/Adyen/adyen-magento2/issues/2281

Describe the bug

As long as Google Pay is provided in the Checkout, a connection to fonts.googleapis.com is made

To Reproduce Steps to reproduce the behavior:

  1. In the consent manager of your choice (we use consentmanager.net) don't allow google fonts
  2. Go to checkout (Onestep checkout)
  3. Check the network tab
  4. Google fonts are loaded

Expected behavior

Google fonts are only loaded if the user gives consent.

Magento version 2.4.5

Plugin version 8.10.0

Screenshots image Desktop (please complete the following information):

  • OS: Linux, Windows
  • Browser Chrome
  • Version 117

Additional context

In Germany there are was a wave of cease and desist letters to not use Google Fonts, so this is a quite important topic.

I guess it would be okay to load google fonts as soon as Google Pay is selected, but it is loading initially on opening the checkout.

Can this be optimized?

amenk avatar Oct 31 '23 11:10 amenk

Hey @amenk ,

We could potentially delay the loading of pay.js on Drop-in , if GooglePay is available within the list of payment methods and it is not 'active'.

Another point to highlight is that Magento does not use Drop-in as far as I known, so if this change is required, they will need to update on their side as well and lazy-load the component.

We are checking this internally with the team and I will get back to you as soon as I find out more if we need to make these changes from our side.

Cheers

ribeiroguilherme avatar Nov 03 '23 11:11 ribeiroguilherme

Hi @amenk ,

An update from our side: our colleagues are in contact with Google, and GooglePay mentioned that they do not store the IP address and they are investigating this further.

I will keep you posted as soon as we find out more about this.

ribeiroguilherme avatar Nov 06 '23 10:11 ribeiroguilherme

Hi @amenk ,

GooglePay team mentioned that they do not store any shopper related data when requesting the fonts. For more information regarding this, you can check the Google Font FAQ Privacy page.

Therefore we are going to close this ticket for now. Thanks for reaching out!

ribeiroguilherme avatar Jun 05 '24 13:06 ribeiroguilherme