webtracking.org
B 84/100

Cloudflare Web Analytics

Free, cookieless, no fingerprinting and no cross-site identifiers. The trade-off is structural: data is processed on Cloudflare's global network with no residency control.

verified 2026-07-11 · grade set per the published methodology

How the grade breaks down

Data minimization 5/5

How little it collects, and whether collection is purpose-bound.

Consent honoring 5/5

Whether it respects GPC, consent state, and tracking-prevention signals.

Identifier strategy 5/5

Cookieless vs. persistent IDs, cross-site linkage, fingerprinting risk.

Residency & sharing 2/5

Where data lives and whether it is shared with third parties.

Transparency 4/5

How verifiable and documented its real behavior is.

At a glance

Category analytics
Cookieless by-default
Consent for lawful use not-required
Data residency global
Shares w/ third parties no
Sends PII by default no
Honors GPC not-applicable
Open source no

Cloudflare Web Analytics runs without cookies, localStorage state, or device fingerprinting, and Cloudflare documents that it does not track visitors across sites or build visitor profiles. Metrics are derived per page view rather than from a persistent identifier, so no profile accumulates — and the product is free. The trade-offs are structural rather than behavioral: it is not open source, it cannot be self-hosted, and measurement data is processed on Cloudflare’s global network with no operator control over region. For teams already behind Cloudflare it is a genuinely low-collection default; teams with strict data-residency requirements should weigh the absence of regional pinning.

Sources & basis for grade

Grades reflect documented behavior, vendor documentation, and ad.rip scans as of the date above. Each assessment is reproducible and vendors may request correction.

  • Cloudflare Web Analytics product documentation
  • Cloudflare Web Analytics privacy-first design docs (no cookies, no fingerprinting)
  • Cloudflare privacy policy / DPA