Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
Cloudflare's Privacy Policy explains what data Cloudflare collects about you, how it uses that data, and your rights over it. Cloudflare will not sell or rent your personal information, and it gives you the right to access, correct, or delete your data. If you are a California resident, you can ask Cloudflare not to sell or share your personal information and will not be penalized for exercising that right.
Cloudflare's Privacy Policy establishes the conditions under which Cloudflare collects, uses, retains, and discloses personal information across its services and websites. It sets out an absolute prohibition on selling or renting personal information, restricts Service Providers from using shared data for any purpose beyond providing services to Cloudflare, and limits disclosure outside stated policy purposes to circumstances where Cloudflare first provides notice and a consent opportunity. The policy recognizes a comprehensive set of individual data rights—access, correction, portability, deletion, restriction, and objection—and extends specific non-retaliation and opt-out protections to California residents under CCPA-defined terms. Retention is governed by business purposes and legal obligations, with a notable exception for the 1.1.1.1 resolver service, which does not log personal information and retains most non-personal query data for only 25 hours.
This policy means Cloudflare will not sell or rent your personal information, and it will only share it with outside parties to the extent its Services require or its policy describes—otherwise it must give you notice and a consent opportunity first. You have formal rights to access, correct, update, port, delete, restrict, or object to the processing of your personal information held by Cloudflare. If you are a California resident, you can submit a request to Cloudflare asking it not to sell or share your Personal Information as those terms are defined under the CCPA, and Cloudflare may not penalize you—by denying services or raising prices—for making that request.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
4 important changes detected
4 versions captured · Last updated: August 2026
Cloudflare's privacy policy was updated on May 5, 2026, but the detected change is a minor navigation and service listing update rather than a substantive revision to privacy terms. The …
View change record →Cloudflare's Privacy Policy was updated on April 18, 2026 to reorganize its navigation and service descriptions. The change adds new service sections including 'Support and success bundles', 'Optimized Cloudflare experience', …
View change record →Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Cloudflare has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle 1.1.1.1 resolver does not log personal information and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.