GDPR check for Joomla

Joomla includes privacy components out of the box (Privacy, Consent), but the practical issues come via templates, extensions and embedded content.

Is this a risk?

Many Joomla templates load Google Fonts or icon fonts externally; analytics and marketing plugins often fire without a consent check; map and video extensions load on page view. § 25 (1) TDDDG applies to non-necessary access to the device.

What you can do

• In the template, choose the local fonts option or embed the font files yourself.
• Use a consent extension that holds scripts back until agreement.
• Check analytics/marketing plugins individually for consent linkage and name them in the privacy policy.
• Check the source in a private window: what loads before the first click?

How consentglass helps

The free scan checks the delivered HTML and shows which services are embedded, whether a cookie banner is detected and whether privacy-policy and legal-notice links are present — with context for each finding. It is not a substitute for legal advice.