Cloudflare automatically collects your IP address, browser type, and browsing behavior not just when you use Cloudflare's own products, but also when you visit any website that uses Cloudflare's infrastructure — even if you've never heard of Cloudflare.
Your IP address and browsing metadata are collected by Cloudflare every time you visit a website that uses Cloudflare's network, creating a data footprint with a company you may never have knowingly interacted with.
Cross-platform context
See how other platforms handle Passive Network Data Collection and similar clauses.
Compare across platforms →Because Cloudflare handles a significant portion of global internet traffic, this passive collection affects an enormous number of people who have no direct relationship with Cloudflare and may be unaware their data is being collected.
REGULATORY FRAMEWORK: Automatic collection of IP addresses and browsing data constitutes processing of personal data under GDPR Art. 4(1) and requires a lawful basis under Art. 6. The ePrivacy Directive (2002/58/EC) and its national implementations govern use of tracking technologies and require consent in most EU jurisdictions. CCPA §1798.140(o) defines 'personal information' to include IP addresses and browsing history, triggering disclosure and opt-out obligations. FTC Act Section 5 applies to any deceptive omissions about the scope of data collection.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.