A speed report and the privacy page’s third-party list disagreed with how the site was meant to work: the brand fonts were already self-hosted, yet a widget on every page still loaded a Google Fonts stylesheet and an icon font from a public CDN (about 700 KB for the icons alone).
Field Note #334
⚡ Quick Fix (TL;DR)
The Culprit: The widget's embed code was copied from an earlier build and still carried its own links. Nobody had looked at what the page actually requested after the fonts moved, and an icon font served as "latest" from a CDN was never on any list.
The Fix: After any hosting or font change, open the browser's Network tab, filter for the outside hosts you expect to be gone (for example googleapis and jsdelivr), and remove every link that still appears. Replace a large icon font with the few icons actually used, as inline SVG or CSS masks. Then make the privacy page's third-party list match what really loads, and recheck the live page.
Was this helpful? Thanks for the feedback!