Cloudflare
Content deliveryCloudflare loaded on 220 sites in our October 2026 scan: 9% of the 2,450 most-visited sites we checked, before any visitor had given consent.
Category: Content delivery. A company can do several jobs; this is its main role on the pages we saw.
Its cookies typically last about under a day. Only 50% of the sites where it loaded had a consent banner visible at all. It's especially common on .jp sites: 14% of them load it, versus 9% of all sites we scanned.
About Cloudflare
Cloudflare provides content delivery, DDoS protection and bot-management infrastructure used by a large share of the web.
Beyond serving static assets from cdnjs.cloudflare.com, it commonly runs a challenge page or CAPTCHA through challenges.cloudflare.com and sets short-lived cookies like __cf_bm and cf_clearance to distinguish bots from real visitors. It isn't counted as a tracker here, since neither job is about following a visitor across sites.
Often loaded alongside
Sites that load Cloudflare most often also load Google Analytics (73%), Google (71%), Google Ads (51%), jsDelivr (28%), and OneTrust (23%).
Domains it loads from
- cdnjs.cloudflare.com
- challenges.cloudflare.com
- brunhild.challenges.cloudflare.com
- cloudflare.com
- www.cloudflare.com
- customer-ltx6ylk10sje63q6.cloudflarestream.com
- platform.dash.cloudflare.com
- customer-e5dv0zdx7q80qq2x.cloudflarestream.com
- customer-l1i0l3fn06n7hp6n.cloudflarestream.com
- fbc8edc1-960b-421e-9d23-f6d883556813.search.ai.cloudflare.com
Cookies
- __cf_bm719 sites
- cf_clearance226 sites
- _cfuvid156 sites
- __cflb26 sites
Sites that load Cloudflare
The highest-ranked 30 of 220 sites.
- ipify.org4 tracking companies
- twitch.tv1 tracking company
- nist.gov3 tracking companies
- pubmatic.com1 tracking company
- who.int3 tracking companies
- tinyurl.com2 tracking companies
- datadoghq.com14 tracking companies
- cnbc.com9 tracking companies
- mediatek.com7 tracking companies
- wired.com2 tracking companies
Show 20 more sites
- cornell.edu3 tracking companies
- klaviyo.com4 tracking companies
- onetrust.com2 tracking companies
- nike.com1 tracking company
- techcrunch.com38 tracking companies
- sagepub.com4 tracking companies
- cambridge.org2 tracking companies
- anydesk.com2 tracking companies
- parklogic.com0 tracking companies
- wpguardian.com4 tracking companies
- gumgum.com3 tracking companies
- xbox.com1 tracking company
- theverge.com10 tracking companies
- discogs.com3 tracking companies
- www.gov.br1 tracking company
- agora.io0 tracking companies
- otto.de0 tracking companies
- corriere.it12 tracking companies
- xerox.com4 tracking companies
- sofascore.com0 tracking companies
Understanding this page
- What the tracker categories mean
What "advertising," "analytics," "social," "consent" and the rest actually mean for a company or a cookie, and how CookieTosser decides which one applies.
- First-party vs third-party cookies (and why "first-party" still tracks you)
What the distinction actually means technically, why browsers only block one of the two, and how CNAME cloaking, server-side tagging and cookies like _ga let sites keep tracking under their own domain.
- How to block or limit trackers
Browser privacy settings, content blockers, Global Privacy Control and clearing cookies compared honestly — what each one actually stops, what it doesn't, and what it costs you in return.