Privacy policy — Cloudflare Zero Trust

Cited by

Facts read from this source

• Policy effective date Report an error

  “This Privacy Policy is effective as of November 4th, 2025.”

• Policy update korea Report an error

  “We have updated our October 31, 2025 Privacy Policy to include our new Addendum applicable to users in South Korea”

• No sell rent Report an error

  “We keep your personal information personal and private. We will not sell or rent your personal information.”

• Min age Report an error

  “Cloudflare’s Websites and Services are not intended for, nor designed to attract, individuals under the age of eighteen.”

• Dpf certification Report an error

  “Cloudflare complies with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF as set forth by the U.S. Department of Commerce.”

• Cbpr certification Report an error

  “we rely on our certifications under the CBPR System and Global PRP System, as applicable.”

• Scc fallback Report an error

  “Should these certifications lapse or become otherwise invalidated, Cloudflare relies on the standard contractual clauses, including supplementary measures as necessary for transfers to the United States.”

• Storage regions Report an error

  “We primarily store your information in the United States and the European Economic Area.”

• Data controller role Report an error

  “Cloudflare is a data controller for the personal information collected from all categories of data subjects listed above, with the following exceptions: Cloudflare is a data processor of Customer Logs, Administrative User Audit Logs, and some account settings information.”

• Dns resolver logging Report an error

  “Our 1.1.1.1 resolver service does not log personal information, and the bulk of the limited non-personally identifiable query data is only stored for 25 hours.”

• Credit card storage Report an error

  “we will collect your card information and billing address, although we do not store full credit card numbers or personal account numbers.”

• Registrar status Report an error

  “Cloudflare is an ICANN-accredited registrar and complies with the 2013 Registrar Accreditation Agreement (“RAA”).”

• Apnic Report an error

  “Cloudflare does not share 1.1.1.1 resolver logs with any third parties except for anonymous logs shared with APNIC pursuant to a Research Cooperative Agreement.”

• End user rights routing Report an error

  “If an End User requests that we fulfill a Rights Request, we will direct that End User to contact the Customer website(s) with which they interacted directly.”

• Retention deletion Report an error

  “When the data retention period expires for a given type of data, we will delete or destroy it.”

• Account self service Report an error

  “Customers and Administrative Users also can access, correct, export, or update their Account Information by editing their profile or organization record at Cloudflare.com.”

• Data aggregation sharing Report an error

  “Non-personally identifiable, aggregated data may be shared with third parties.”

• Dispute resolution Report an error

  “please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.”

• Language controls Report an error

  “In the event of any ambiguity or conflict between translations, the English version is authoritative and controls.”

• California notice Report an error

  “This section applies only to California residents. It describes how we collect, use, and share Personal Information of California residents in operating our business, and their rights with respect to that Personal Information.”

4 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The DevOps Engineer European sovereignty
• The IT Lead Logs, audit trail & incident response
• The IT Lead European sovereignty
• The MSP Technician European sovereignty
• The Operations Manager European sovereignty
• The Information Security Officer European sovereignty
• The Skeptic European sovereignty