Cloudflare's separate privacy policy governs how your data is handled, and by using the services you acknowledge that internet transmissions are not completely private or secure.
This analysis describes what Cloudflare's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Incorporating the privacy policy by reference means changes to that document affect your rights under this agreement, and the acknowledgment that transmissions are never fully secure may affect any expectation of confidentiality for data transmitted through Cloudflare's network.
Interpretive note: The adequacy of privacy policy incorporation by reference to satisfy GDPR transparency requirements depends on how and when notice is provided to data subjects and whether the privacy policy itself meets applicable standards, which requires review of that separate document.
Your data rights and privacy protections are governed by a separate document that can be updated independently of these terms. The acknowledgment regarding transmission security may be relevant if a data interception or security incident occurs and you seek to assert claims.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
"Cloudflare's current Privacy Policy is incorporated into this Agreement by this reference and is located at https://www.cloudflare.com/privacypolicy/. In addition, by using the Services, you acknowledge and agree that internet transmissions are never completely private or secure.Excerpt from Cloudflare's Terms of Use
REGULATORY LANDSCAPE: The incorporation of a privacy policy by reference into a terms of service agreement is evaluated under GDPR Article 12-13 (transparency obligations), CCPA Section 1798.100 et seq.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Incorporating the privacy policy by reference means changes to that document affect your rights under this agreement, and the acknowledgment that transmissions are never fully secure may affect any expectation of confidentiality for data transmitted through Cloudflare's network.
Your data rights and privacy protections are governed by a separate document that can be updated independently of these terms. The acknowledgment regarding transmission security may be relevant if a data interception or security incident occurs and you seek to assert claims.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cloudflare.