Academy

Fontsource review: serve fonts from your site

Paper letter shapes and a pencil on a sunlit desk

Fontsource packages open-source fonts so you can self-host them on a website you publish.1 Each family is an npm package, meaning installable code.1 That is a practical way to self-host Google Fonts: the files ship with your site, and a visitor’s browser does not request them from Google.16 It is for people publishing a website.

Last checked October 28, 2026.

At a glance

  • What it is: Open-source fonts packaged so a website can serve them itself.1
  • Works on: Website projects that use a bundler such as Vite or Webpack. Install with a package manager, or download the font files.2
  • Price: The packaging software is free of charge. Each font has its own licence.57
  • Licence: MIT for the software. Most fonts use the SIL Open Font License 1.1. Some use Apache 2. Ubuntu fonts use the Ubuntu Font License 1.0.57
  • Best for: People publishing a website who want the typeface served from their own address.
  • Official site: fontsource.org

What Fontsource does (and how it protects your privacy)

A web font is a typeface the browser downloads so a page looks the same on different computers. A link to Google Fonts makes that browser send the visitor’s IP address, the font address, and headers for the browser, operating system and page.6 Google says this API does not set or log cookies, and does not use the data for profiles or targeted ads.6 An API is a way for a program to ask a service for data. Fontsource says Google does track font usage, and that self-hosting is the choice for people who are extremely privacy concerned.1

Install a package and publish the site, and the font files go out with everything else.2 Google’s FAQ says that when a font loads from the website operator’s servers, Google receives no data about those visits.6 Fontsource also offers a public delivery network run with Cloudflare and jsDelivr.3 The privacy policy says using it sends font requests to those providers, while self-hosting the packages does not send those requests.3 Packages stay version locked, so you update a font the same way you update any other package.1

The fonts can load offline, which helps where there is little or no internet.1 The collection also includes fonts from outside Google’s catalogue.1 For a typeface on your own computer, Inter is a free font you install yourself.

Key features of Fontsource

  • One package per family: You add only the fonts the site uses.1
  • Variable fonts: The variable package covers a continuous range of weights and often needs fewer files.2
  • Static faces: Otherwise import only the weights and styles you need. For most families the plain import is weight 400.2
  • Character sets: The CSS uses unicode-range, a note listing which characters are in each file, so the browser downloads only the sets the page uses.2
  • A locked version: The font stays at the package version you installed.1
  • A plain download: You can download the font files from the directory listing if you are not using a package.2
  • A licence note: The Inter variable package is version 5.3.0 under the SIL Open Font License 1.1, and the package text tells you to read the licence for the family you picked.7

Fontsource pros and cons

Pros

  • The fonts are open source and packaged for self-hosting in a web project.1
  • Google says a font loaded from your servers means Google receives no data about those visits.6
  • Versions stay put until you choose to update them.1
  • The project is still shipping updates. Release core-v0.6.1 is dated 12 October 2026.8

Cons

  • The package path expects a bundler such as Vite or Webpack, a tool that packs the site’s files for publishing.2
  • There is no single font licence. Most families use the SIL Open Font License 1.1, some use Apache 2, and Ubuntu fonts use the Ubuntu Font License 1.0.7
  • Public delivery links send font requests to Cloudflare and jsDelivr. The privacy gain is the self-hosted path.3
  • The catalogue website is separate from the packages. It uses PostHog analytics, sends searches to Algolia, and shows Carbon ads on some pages.3
  • Google says self-hosting can mean a larger file than the pieces its service sends, no way to ensure compatibility with every browser, and updates you apply yourself.6

Is Fontsource safe and private?

Google’s FAQ says that once your site serves the font, Google receives no visit data for it.6 Fontsource’s privacy policy, updated on 21 September 2026, names Cloudflare for the website and API, and Cloudflare and jsDelivr for the public delivery network.3 Self-hosting the packages means those font requests are not sent.3 A pasted delivery link still sends them.3

Browsing the catalogue is a different visit. Search terms go to Algolia.3 PostHog records which pages people visit, how they use the site, and where things are slow or break. It uses the IP address and browser details for a temporary identifier, does not save analytics identifiers in cookies or browser storage, and uses EU hosting.3 Some pages show Carbon ads.3 Font tools process files in the browser and do not upload them.3 The software is MIT-licensed, copyright 2024 Ayuhito, and privacy mail goes to [email protected].53 Release core-v0.6.1 is dated 12 October 2026, and the Inter variable package is 5.3.0 as of 19 July 2026.87

How to get started with Fontsource

  1. Open fontsource.org and choose a family. Read the licence in its package before you publish.7
  2. In a project with a bundler such as Vite or Webpack, install a package. The guide’s variable example is npm install @fontsource-variable/open-sans. With no variable package, use the static one, such as npm install @fontsource/open-sans.2
  3. Import it once where the site starts: import "@fontsource-variable/open-sans";. For a static font, import only the weights you use. The plain import is weight 400 for most families.2
  4. Name the family in CSS, the page’s style rules. The example is font-family: "Open Sans", sans-serif;.2
  5. Build and publish. The packages are meant to be bundled and self-hosted with the application.2 On Next.js, the browser then serves those files from the same deployment.4
  6. Without a bundler, download the files from the directory listing and put them on your server.2 Skip the public delivery link when privacy is the reason you switched: it sends requests to Cloudflare and jsDelivr.3

Who should use Fontsource (and who might prefer something else)

Fontsource suits someone publishing a website who wants the typeface to come from that same site. You might sketch the layout in Penpot and draw icons in Inkscape, then serve the font with a package. It also fits a family that is not on Google’s list.1

For a document on your own computer, install a font file. Inter is one free family for that. On Next.js, if you only need Google’s catalogue, Fontsource’s guide says next/font also self-hosts the files and does not send the browser to Google.4 Choose Fontsource for package versions, fonts outside that catalogue, or direct control of the CSS and files.4

Frequently asked questions

Is Fontsource free?

The MIT licence grants the packaging software free of charge.5 Font licences differ. Most of the collection uses the SIL Open Font License 1.1, some fonts use Apache 2, and Ubuntu fonts use the Ubuntu Font License 1.0. Read the one in the package you install.7

Is Fontsource private?

Self-hosting is the private path: Google receives no visit data for that font, and requests do not go to Cloudflare or jsDelivr.63 The catalogue uses PostHog, Algolia and, on some pages, Carbon ads.3 A delivery-network link still sends the font requests.3

Does Fontsource work on iPhone?

It is not a phone app. It ships font files with a website.2 A phone then loads them from your address, which Google’s FAQ describes as loading from the website operator’s servers.6 To install a font for your own writing, use a file such as Inter.

Does Fontsource only repackage Google Fonts?

No. It also supports fonts outside the Google Fonts ecosystem.1 The Inter variable package is one example: version 5.3.0, licence OFL-1.1, npm record updated on 19 July 2026.7

Sources

  1. Fontsource: Introduction
  2. Fontsource: Installing Fonts
  3. Fontsource: Privacy Policy
  4. Fontsource: Next.js
  5. Fontsource: MIT License
  6. Google Fonts: Privacy and data collection FAQ
  7. npm: @fontsource-variable/inter
  8. Fontsource: GitHub releases

BellCrier breach check

Is your email already in a data breach?

Most people are, and never hear about it. BellCrier checks your email against known data breaches for free, then alerts you when it turns up in a new one, with exactly what leaked and how to fix it.

  • Free instant check
  • No password needed
  • Alerts for you and your family

Opens bellcrier.com with your email filled in. Nothing is checked until you confirm there.