Hosting and request information
Cloudflare hosts the website and app. Its standard hosting and security processing can include IP addresses, request and traffic-routing information, browser or system information, and operational service data.
During setup, Cloudflare was observed injecting its Web Analytics beacon on the authenticated dashboard. That beacon is designed to send page-view and browser performance information, including page and referring URLs and loading/timing metrics. The website and app now request no-transform in their response headers to prevent automatic beacon injection. See Cloudflare’s automatic-injection documentation.
Cloudflare states that its RUM beacon does not use browser storage such as cookies or localStorage, and that Web Analytics does not fingerprint individuals for analytics. This is separate from the essential sign-in storage described above. See Cloudflare’s RUM data and privacy documentation and Web Analytics privacy information.
See Cloudflare’s privacy policy for its wider platform practices.