A content delivery network and cybersecurity company that provides internet infrastructure services including DDoS protection, web performance optimization, and DNS services to websites and online platforms. The company's services act as an intermediary between users and websites, meaning it handles significant amounts of internet traffic and user data across millions of sites. Their policies determine how user browsing data, security logs, and personal information are collected, processed, and shared when accessing websites that use their infrastructure services.

3 Documents
35 All provisions 9 High severity 25 Medium severity 1 Low severity
5 Changes · 12 mo
Jul 1, 2026 Last change

High, provisions that significantly limit your legal rights, authorize broad data collection, or create material financial exposure. Medium, provisions worth knowing about but with partial protections or limited scope. Low, standard terms with minimal consumer impact.

Governance Coverage
Contract Terms
29 provisions · 16 high · 9 med
Privacy Rights
23 provisions · 6 high · 15 med
Data Collection
20 provisions · 3 high · 15 med
Data Sharing
18 provisions · 8 high · 9 med
Acceptable Use
15 provisions · 10 high · 4 med
Data Usage
12 provisions · 2 high · 6 med
Liability Limitation
11 provisions · 10 high · 1 med
Arbitration
10 provisions · 4 high · 6 med
Payment Fees
7 provisions · 2 high · 3 med
Platform Discretion
6 provisions · 3 high · 3 med
Quick Facts
Arbitration: Mandatory
Data Retention: Specified
Class Action: Waived
Key Governance Provisions
High Service providers prohibited from selling shared data

Personal information shared with Cloudflare's Service Providers is contractually ring-fenced to Cloudflare-directed service purposes, preventing secondary commercial use by those providers.

High Jury Trial Waiver and Class Action Waiver

These waivers eliminate two significant procedural rights: the ability to have disputes decided by a jury and the ability to join or bring a class action, which is often the only economically viable …

High Mandatory Binding Arbitration for All Disputes

Binding arbitration removes disputes from the court system entirely, limiting the user's procedural options and making arbitral awards final and enforceable.

High Aggregate Liability Cap at 12-Month Fees Paid

This cap means that no matter how significant the harm, the maximum financial recovery from Cloudflare is bounded by a single year of the user's own payments, which could be zero for free-tier users.

High Exclusion of Indirect and Consequential Damages

This exclusion removes entire categories of damages—often the largest in a dispute—from any claim a user or third party could bring against Cloudflare relating to Service use.

Document Coverage
Privacypolicy Subprocessorlist Termsofservice
Last change detected: Jul 1, 2026 Changes (12 months): 5 Documents monitored: 3 Provisions tracked: 35
Compare With Similar Platforms
Adobe American Airlines Arlo AWS AWS Bedrock Canva Databricks Delta Airlines

Documents

Cloudflare Sub-Processors

Last updated July 6, 2026 · Sub processor list
0 provisions 1 version captured Version history →

Cloudflare Privacy Policy

Medium

Cloudflare's Privacy Policy explains what data Cloudflare collects about you, how it uses that data, and your rights over it. Cloudflare will not sell or rent your personal information, and …

Last updated May 5, 2026 · Privacy policy
8 provisions 3 versions captured Version history →

Cloudflare Terms of Use

Medium

These Terms govern your access to Cloudflare's Services under a limited, revocable license that Cloudflare can cancel at any time for any reason. If you pay for a subscription, it …

Last updated May 5, 2026 · Terms of service
9 provisions 5 versions captured Version history →
📈 Policy Drift Analysis View all changes →

High Severity Provisions (8)

View all high severity provisions → Compare Cloudflare with other platforms →

Applicable Regulations

CCPA/CPRA
California, USA
View official text ↗
CFAA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
ePrivacy Directive
European Union
View official text ↗
FAA
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗

Compare with Similar Platforms

Adobe
infrastructure
American Airlines
infrastructure
Arlo
infrastructure
AWS
infrastructure
AWS Bedrock
infrastructure
Canva
infrastructure
Databricks
infrastructure
Delta Airlines
infrastructure

Frequently Asked Questions

What Cloudflare documents does ConductAtlas track?

ConductAtlas tracks 3 Cloudflare documents including terms of service, privacy policy, and other governance documents. Every document is captured daily with cryptographic verification.

How many policy changes has Cloudflare made in the past year?

Cloudflare has made 5 policy changes in the past 12 months across the documents ConductAtlas tracks.

How many provisions has ConductAtlas classified for Cloudflare?

ConductAtlas has classified 35 provisions across Cloudflare's tracked documents. 9 are rated high severity, 25 medium, and 1 low.

Can I get alerts when Cloudflare changes their policies?

Yes. Monitor subscribers ($4.99/month) can add Cloudflare to their watchlist and receive same-day email alerts whenever any tracked document changes.