Privacy Recommended
Host everything yourself
Avoid third-party scripts. Host what you need yourself, so visitors' data does not go to other companies.
How to do it
Host fonts, scripts and images yourself. Remove tag managers and embeds you can replace. Let the Content Security Policy allow only your own origin.
Example
Content-Security-Policy: default-src 'self'; img-src 'self' data:; frame-ancestors 'none'
@font-face {
font-family: "Inter";
src: url("/fonts/inter.woff2") format("woff2");
font-display: swap;
}
How to check
The network panel shows a single origin.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers website playbook: https://agentwranglers.se/playbook/website/privacy/third-party-scripts.