Ask HN: Do I have to show a cookie banner if my website is behind Cloudflare?

3 points by theanonymousone 1y ago ↗ HN

Assume a constituency where GDPR matters. My web service does not otherwise collect anything serious, and hence I do not have to show the cookie consent banner.

But what if I put my website behind cloudflare? I see in their control panel there is also an analytics service, probably others collect something as well. Does that make me responsible to ask for cookie consent? The information around the web were not conclusive.

Thanks

4 comments

[ 2.4 ms ] story [ 18.7 ms ] thread

dave4420 1y ago ↗

If Cloudflare sets cookies on your behalf, you will need to ask for consent.

My understanding is that Cloudflare now allow you to configure their service so that they do not set any cookies automatically.

theanonymousone 1y ago ↗

How do I check if CF is setting cookies on my domain? Is it explicitly mentioned in their control panel?

stop50 1y ago ↗

you can open your website and see in the developer tools if there are any CF related cookies

hnsaccount 1y ago ↗

Dave, below is correct. If Cloudflare places cookies on your behalf, you need to ask for consent. Most likely, you can group it as essential. If you use it for analytical purposes, you need to classify it accordingly.