Loading Google Fonts is not GDPR compliant

[janmonschke]

According to a German court, loading Google Fonts from Google's servers is not GDPR compliant and can lead to fines (source).

Therefore, bruno should embedd the Inter Google font that is currently loaded from Googles servers.

bruno/packages/bruno-app/src/pages/_document.js

Lines 34 to 37 in f8f3880

	<link
	href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap"
	rel="stylesheet"
	/>

NextJS 13 provides a helper module that lets you embedd the font: https://nextjs.org/docs/app/building-your-application/optimizing/fonts#google-fonts. Currently bruno use Next 12.

[grubersjoe]

I have had good experience with fontsource packages: https://www.npmjs.com/package/@fontsource/inter. Might also be a consideration.

[janmonschke]

@grubersjoe I agree that fontsource would solve this issue as well. Being in the next ecosystem, it might make sense to stick to the next modules though. (see #696)

[grubersjoe]

Agreed. I forgot that Bruno uses Next internally.

[helloanoop]

There is a v1.0.0 planned on Oct 29th 2023. Upgrading to a major version of Next with days away is a bit risky.

I welcome and support this PR. Will review this post V1 launch.
Meanwhile, if there is a smaller PR that can introduce the inline google font without upgrading next, please raise a PR for the same.

[janmonschke]

@helloanoop Fixed it without the nexst update here: #750

[Uj947nXmRqV2nRaWshKtHzTvckUUpD]

as of last version, bruno still tries to (maybe) download google fonts. as a user running from the privacy nightmare of postman to the bad ux insomnia, now i find myself trying bruno which vouches as a private app, but instead leaks my ip to google's empire.

it's literally on bruno's front page:
"Bruno is offline-only. There are no plans to add cloud-sync to Bruno, ever. We value your data privacy and believe it should stay on your device. Read our long-term vision here."

this should have highest priority and be fixed asap, or else people will lose trust in you from the very beginning

[grubersjoe]

Maybe using the @fontsource/inter package wouldn't be the worst idea. Then it would work offline and Google is out if the equation.

[janmonschke]

Agreed, I updated the PR because, in the meantime, conflicts occured in the package-lock file. #750

[helloanoop]

Reopening this issue.
With Pr #750 , the Inter font loaded perfectly in development versions but was not working in production build.

[NiklasBr]

Maybe use the system fonts if Inter is problematic?