California residents have the right to know what personal data Cloudflare holds about them, request deletion or correction of that data, opt out of its sale or sharing for advertising, and cannot be penalized for exercising these rights.
This analysis describes what Cloudflare's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These are legally enforceable rights under California law, not just policy commitments, and include the right to opt out of data sharing for behavioral advertising, which is relevant given Cloudflare's use of third-party advertising cookies.
Added explicit mention of CPRA (new California law) and included additional rights (opt-out of sale/sharing, non-discrimination, correct inaccurate information) previously only partially addressed.
View full change record →California residents can submit requests to Cloudflare to access, delete, or correct their personal information, and can opt out of the sale or sharing of that information for advertising purposes, with those rights enforced by the California Privacy Protection Agency.
How other platforms handle this
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
Not be Discriminated Against by us for exercising your privacy rights.
You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.
"California residents have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These rights include the right to know what personal information we collect, use, disclose, and sell; the right to delete personal information; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of your personal information; and the right to non-discrimination for exercising your rights.Excerpt from Cloudflare's Privacy Policy
REGULATORY LANDSCAPE: This provision directly engages the CCPA as amended by CPRA, enforced by the California Privacy Protection Agency (CPPA) and California Attorney General.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
These are legally enforceable rights under California law, not just policy commitments, and include the right to opt out of data sharing for behavioral advertising, which is relevant given Cloudflare's use of third-party advertising cookies.
California residents can submit requests to Cloudflare to access, delete, or correct their personal information, and can opt out of the sale or sharing of that information for advertising purposes, with those rights enforced by the California Privacy Protection Agency.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cloudflare.