Context
Fonts came from Google, d3 from a CDN and the Inside deploy feed from the GitHub API, so opening a page passed the visitor's address to three companies. The LG München I judgment of 2022-01-20 (3 O 17493/20) found this unlawful for Google Fonts loaded without consent.
Decision
Fonts and d3 are served from the site itself, and the Inside deploy feed is a JSON written by the deploy job. Opening a page sends no request to a third party. Grafana frames load only when the reader scrolls to them.
Consequences
The deploy feed on Inside is as fresh as the last deploy; the live view is the Website deploys dashboard. Font and d3 updates are manual. Later Inside data (board, search index) follows the same pattern.