GDPR compliance

[chekalsky]

Hey, does anybody have experience or thoughts on making site that use unpkg GDPR-compliant?

[jonaseberle]

No chance probably.

[mojoaxel]

Hey, does anybody have experience or thoughts on making site that use unpkg GDPR-compliant?

The only way I see at the moment is to inform the user that dependencies from unpkg.com (cloudflare) are necessary to load the page, before actually loading them. Than the user has the option to leave the page before sharing data with cloudflare.

If the loading of assets from unpkg is really "necessary" is questionable because hosting the dependencies GDPR complaint is always an option.

I would not recommend to use unpkg in production if the GDPR applies!

*I'm not a laywer, this is NOT legal advice!

[jimaek]

Some thoughts from lawyers as well https://www.jsdelivr.com/blog/how-the-german-courts-ruling-on-google-fonts-affects-jsdelivr-and-why-it-is-safe-to-use/