A content delivery network and cybersecurity company that provides internet infrastructure services including DDoS protection, web performance optimization, and DNS services to websites and online platforms. The company's services act as an intermediary between users and websites, meaning it handles significant amounts of internet traffic and user data across millions of sites. Their policies determine how user browsing data, security logs, and personal information are collected, processed, and shared when accessing websites that use their infrastructure services.

2 Documents
35 All provisions 9 High severity 25 Medium severity 1 Low severity
3 Changes · 12 mo
May 5, 2026 Last change

High — provisions that significantly limit your legal rights, authorize broad data collection, or create material financial exposure. Medium — provisions worth knowing about but with partial protections or limited scope. Low — standard terms with minimal consumer impact.

Governance Coverage
Privacy Rights
11 provisions · 1 high · 10 med
Payment Fees
5 provisions · 1 high · 4 med
Liability Limitation
4 provisions · 3 high · 1 med
Data Sharing
4 provisions · 1 high · 2 med
Data Collection
3 provisions · 3 med
Platform Discretion
2 provisions · 2 med
Acceptable Use
1 provision · 1 med
Content Moderation
1 provision · 1 med
Legal Jurisdiction
1 provision · 1 med
Intellectual Property
1 provision · 1 med
Quick Facts
Arbitration: Mandatory
Class Action: Waived
Key Governance Provisions
High Controller vs. Processor Dual Role

This distinction means that if you want to exercise privacy rights regarding data processed on behalf of a third-party website, you may need to contact that website's operator rather than Cloudflare …

High Account Suspension and Termination

For businesses relying on Cloudflare for DNS, CDN, or DDoS protection, an unexpected account termination with no notice can cause immediate service outages with no time to migrate to an alternative p…

High User Indemnification Obligation

This clause can create significant unexpected financial exposure for users if a third party brings a legal claim related to content or activity on their account, shifting Cloudflare's legal defense c…

High Limitation of Liability

For businesses relying on Cloudflare for mission-critical infrastructure, this cap may be far lower than actual damages suffered during a significant outage or security incident, leaving a substantia…

High Disclaimer of Warranties

This disclaimer allocates risk by establishing that the provider makes no affirmative guarantees regarding service performance, reliability, or security characteristics. This provision defines the ba…

Document Coverage
Privacypolicy Termsofservice
Last change detected: May 5, 2026 Changes (12 months): 3 Documents monitored: 2 Provisions tracked: 35
Compare With Similar Platforms
Adobe American Airlines Arlo AWS AWS Bedrock Canva Databricks Delta Airlines

Documents

Cloudflare Privacy Policy

Medium

This document establishes Cloudflare's practices for collecting, processing, and using personal information from visitors to Cloudflare websites and from users of Cloudflare services. The policy authorizes data collection including IP …

Last updated May 5, 2026 · Privacy policy
8 provisions 2 versions captured Version history →

Cloudflare Terms of Use

Medium

This document establishes the terms governing use of Cloudflare's internet infrastructure services, including CDN, DDoS protection, DNS, and related products. The agreement specifies that subscription fees are non-refundable and subscriptions …

Last updated May 5, 2026 · Terms of service
9 provisions 3 versions captured Version history →
📈 Policy Drift Analysis View all changes →

High Severity Provisions (7)

View all high severity provisions → Compare Cloudflare with other platforms →

Applicable Regulations

CCPA/CPRA
California, USA
View official text ↗
CFAA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
ePrivacy Directive
European Union
View official text ↗
FAA
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗

Compare with Similar Platforms

Adobe
infrastructure
American Airlines
infrastructure
Arlo
infrastructure
AWS
infrastructure
AWS Bedrock
infrastructure
Canva
infrastructure
Databricks
infrastructure
Delta Airlines
infrastructure

Frequently Asked Questions

What Cloudflare documents does ConductAtlas track?

ConductAtlas tracks 2 Cloudflare documents including terms of service, privacy policy, and other governance documents. Every document is captured daily with cryptographic verification.

How many policy changes has Cloudflare made in the past year?

Cloudflare has made 3 policy changes in the past 12 months across the documents ConductAtlas tracks.

How many provisions has ConductAtlas classified for Cloudflare?

ConductAtlas has classified 35 provisions across Cloudflare's tracked documents. 9 are rated high severity, 25 medium, and 1 low.

Can I get alerts when Cloudflare changes their policies?

Yes. Monitor subscribers ($19/month) can add Cloudflare to their watchlist and receive same-day email alerts whenever any tracked document changes.