Google Fonts are still loading after enabling privacy protection

I enabled privacy protection and font blocking, but Google Fonts are still being loaded on my website. How can I identify which extension or template is responsible for the external font requests and verify that all fonts are served locally? The GDPR warning is still displayed in the backend.