Cloudflare is changing its Privacy Policy

[100bitcoin]

As all of you might already know, Bitcointalk uses Cloudflare - https://bitcointalk.org/index.php?topic=2485318.0.

Now, as an user of Cloudflare myself, I have just been informed that they are changing their Privacy Policy - https://www.cloudflare.com/privacypolicy/10.31.19.

Do Clearnet users need to worry?

[1713573157]

1713573157

[1713573157]

1713573157

[1713573157]

1713573157

[1713573157]

1713573157

[LTU_btc]

I also received email about Cloudflare privacy policy changes week ago. But from what I understood, there is nothing very important in these change. It's mainly related to UK and management of users data after Brexit will happen.

[PrimeNumber7]

It looks like this is a summary of what is being changed:

We have updated our March 14, 2019 privacy policy to address new products and services, to list our Portuguese entity as our legal representative entity in the EU, to address the new California Consumer Privacy Act (CCPA), and to add to this Policy the statements we previously listed separately in our Privacy Shield Framework Statement. In addition, in light of the United Kingdom leaving the European Union (Brexit), we have made changes to clarify our commitment to protect the personal data we receive from the United Kingdom after Brexit.

[Pmalek]

They also state the following:

11. NOTIFICATION OF CHANGES.
If we make changes to this Policy that we believe materially impact the privacy of your personal data, we will promptly provide notice of any such changes (and, where necessary, obtain consent), as well as post the updated Policy on this website noting the effective date of any changes.

https://www.cloudflare.com/privacypolicy/10.31.19

From this I understood there won't be big changes when it comes to handling personal data and in the case they do decide to make significant changes the users will be informed about them.

[squatter]

This is the clause pertinent to us:

End Users:

Cloudflare processes End Users’ information on behalf of our Customers when End Users use our Customers’ domains, websites, APIs, mobile applications, Internet connected devices, and networks.

This information may include but is not limited to IP addresses, system configuration information, and other information about traffic to and from Customers’ websites or networks (collectively, “Log Data”). We collect and use Log Data to operate, maintain, and improve our Services in performance of our obligations under our Customer agreements.

I'm not sure how that differs from the previous policy, if at all. I already expected that Cloudflare was collecting this data.

[LeGaulois]

This is to adapt to the GDPR and to anticipate the Brexit result.

Cloudflare' headquarter is located in the UK and the UK’s data transfer activity with other European countries is considered 'domestic' but with Brexit, it becomes a 'foreign transfer'

CF is sitting in the middle between the UK, EU, GDPR,  ...