GDPR compliance of Mozilla CDN
colourgarden opened this issue · 3 comments
To comply with GDPR, one must ensure that user data is not being collected by externally loaded content which includes fonts being loaded via CDN.
Unfortunately, I cannot find any FAQ or privacy policy regarding the recommended CDN URL at https://code.cdn.mozilla.net. Does such a document exist or must we all assume that this Mozilla CDN is not GDPR-compliant?
Further reading: Google Fonts and GDPR compliance.
Ping @potch
Taking a look...
I will raise this with our legal team. code.cdn.mozilla.net is backed by Amazon Cloudfront, so the answer will be whatever applies to cloudfront in general.
Did anything become of this? It's one of few references I can find wrt that host. Unfortunately like much of Firefox there is nothing in the console nor logs to say what is acccessing it. Seems rather odd to see coming from a browser sitting on about:blank.