This analysis describes what Cloudflare's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These rights are legally enforceable under GDPR and UK GDPR, giving EU and UK users meaningful control over their personal data and a clear escalation path to regulators if Cloudflare does not respond properly.
Cloudflare's policy means your personal data, including IP address, device identifiers, and browsing behavior, may be collected both when you directly use Cloudflare services and when you visit third-party websites that use Cloudflare's network infrastructure, often without your direct awareness. The policy authorizes use of this data for security, analytics, and marketing purposes, and permits sharing with service providers, partners, and in response to legal requests. You can submit a data access, deletion, or opt-out request through Cloudflare's privacy rights portal at https://www.cloudflare.com/privacyrequest/.
How other platforms handle this
In addition to the above rights, your local laws (including those in the EU, UK, Japan, California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Virginia, or Utah) may afford you f...
If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of t...
Depending on where you live, you may have certain rights with respect to your personal information. These rights may include: The right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which we collected i...
Monitoring
Cloudflare has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are located in the European Economic Area or the United Kingdom, you have certain rights regarding your personal data under applicable data protection law. These include the right to access your personal data, the right to rectification of inaccurate data, the right to erasure, the right to restrict processing, the right to data portability, the right to object to processing, and the right to lodge a complaint with a supervisory authority.— Excerpt from Cloudflare's Cloudflare Privacy Policy
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
These rights are legally enforceable under GDPR and UK GDPR, giving EU and UK users meaningful control over their personal data and a clear escalation path to regulators if Cloudflare does not respond properly.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cloudflare.