Privacy, in plain language.
This website presents the product. Credentials and work on your account belong in the native app and Cloudflare.
On this website
There are no account or token forms, email collection, marketing analytics, or tracking SDKs. The preview uses invented data and runs locally in your browser, without calling your account’s API. Fonts, images, CSS, and JavaScript come from this same website.
Hosting and technical data
Cloudflare hosts these pages. To deliver and protect the website, its infrastructure may process technical request information, such as IP addresses, headers, and connection data. This is separate from marketing analytics and does not mean that no data is processed. Please also refer to Cloudflare’s privacy policy.
Credentials in the app
API tokens are stored in the device’s Keychain, accessible only while it is unlocked, without syncing to other devices. The app uses the credential for requests to Cloudflare. It is not sent to this website or included in copied commands.
Browser sign-in
The implementation uses the system browser and OAuth with PKCE. It still needs client registration, verified domain association, and live validation; it is not available in this preview. When configured, the HTTPS callback carries a temporary code, and the app exchanges and renews credentials directly with Cloudflare.
Widget and demo data
The optional widget reads only the snapshot saved by the app: it receives no credentials and makes no network requests. The snapshot is removed when the widget is disabled or the profile or account changes. Images and examples on this site use invented data, rather than real account information.
External services
Cloudflare processes account operations under that service’s permissions and policies. If a TestFlight invitation is available and you choose to follow it, app distribution and testing use Apple’s services.