News for hackers. Stuff that matters.

Ask HN: Do I have to show a cookie banner if my website is behind Cloudflare?

Assume a constituency where GDPR matters. My web service does not otherwise collect anything serious, and hence I do not have to show the cookie consent banner.

But what if I put my website behind cloudflare? I see in their control panel there is also an analytics service, probably others collect something as well. Does that make me responsible to ask for cookie consent? The information around the web were not conclusive.

Thanks

( 4 comments | 2 points | on HN )
Re:Ask HN: Do I have to show a cookie banner if my website i... by dave4420 on Saturday September 28, 2024 @10:39AM (#41680484)
If Cloudflare sets cookies on your behalf, you will need to ask for consent.

My understanding is that Cloudflare now allow you to configure their service so that they do not set any cookies automatically.

Re:Ask HN: Do I have to show a cookie banner if my website i... by theanonymousone on Saturday September 28, 2024 @12:52PM (#41681435)
How do I check if CF is setting cookies on my domain? Is it explicitly mentioned in their control panel?
Re:Ask HN: Do I have to show a cookie banner if my website i... by stop50 on Saturday September 28, 2024 @01:04PM (#41681512)
you can open your website and see in the developer tools if there are any CF related cookies
Re:Ask HN: Do I have to show a cookie banner if my website i... by hnsaccount on Saturday September 28, 2024 @12:22PM (#41681207)
Dave, below is correct. If Cloudflare places cookies on your behalf, you need to ask for consent. Most likely, you can group it as essential. If you use it for analytical purposes, you need to classify it accordingly.