Afaik loading fonts from Google's servers requires user permission (cookie banner or such), at least several GDPR articles recommend self-hosting. Google though says "For clarity, Google does not use any information collected by Google Fonts to create profiles of end users or for targeted advertising." (https://developers.google.com/fonts/faq/privacy)
Google allows downloading and self-hosting of fonts.
