Cloudflare Browser Insights
Cloudflare Browser Insights is a cookieless Real User Monitoring beacon that reports Core Web Vitals, navigation timings and JavaScript errors from visitor browsers to Cloudflare.
What does Cloudflare Browser Insights do?
What Cloudflare Browser Insights is
Cloudflare Browser Insights is a Real User Monitoring beacon that Cloudflare can automatically inject into pages served through its proxy. It reports Core Web Vitals, navigation timing, JavaScript errors and a sampled view of resource performance back to Cloudflare. It is intended for performance and stability monitoring, not for marketing analytics.
Cookies and data collected
By design Browser Insights does not set cookies. The beacon collects timing data, the URL, viewport size, browser and operating system, and the visitor IP, which Cloudflare uses to compute aggregated dashboards. There is no persistent visitor identifier and the data is not used to build behavioural audiences.
GDPR and ePrivacy considerations
Because no cookies are written, article 5(3) of the ePrivacy Directive is not triggered. The beacon still processes the visitor IP and timing data, which can be relied upon under legitimate interest if the operator documents the limited purpose, retains data for the shortest reasonable period and configures the IP truncation that Cloudflare offers.
Consent and configuration
Many operators leave Browser Insights on without a CMP gate. To stay on the safe side, expose the beacon in your privacy notice, document the legitimate interest balancing test and offer an objection mechanism. Some EU data protection authorities expect this kind of cookieless beacon to remain limited to performance monitoring with no link to advertising.
Data transfers and storage
Cloudflare runs a global edge network. Browser Insights data is processed at the closest point of presence and aggregated centrally. The Data Localisation Suite can pin EU traffic to European data centres, but control plane and aggregated metrics may still be processed in the United States. Transfers rely on Standard Contractual Clauses and the EU-US Data Privacy Framework.
Practical compliance steps
Sign the Cloudflare DPA, enable the Data Localisation Suite for EU only routing, configure short retention, document the legitimate interest assessment, mention Browser Insights in the privacy notice, and disable it for properties where any further analytics already covers performance monitoring.
Cloudflare Browser Insights and the GDPR
- Legal basis
- Legitimate interest (Art. 6(1)(f) GDPR) for the cookieless Real User Monitoring data, on the condition that the implementation is documented and that no behavioural profiling is performed
- Risk level
- low
- Applicable regulations
- GDPR, ePrivacy Directive, EU-US Data Privacy Framework
Impact assessment (DPIA)
A DPIA is generally not required for the default cookieless beacon, but it becomes appropriate when Browser Insights is combined with broader Cloudflare analytics that do use identifiers, or when EU traffic is routed through US data centres without the Data Localisation Suite.
Sample text for your banner
We use Cloudflare Browser Insights to monitor the performance of our pages. The beacon does not set cookies and only collects technical metrics such as load time and Core Web Vitals. No behavioural profiling is performed.
What Cloudflare Browser Insights sets and contacts
- Tracking method
- JavaScript beacon injected by Cloudflare on proxied sites; reports Real User Monitoring metrics (Core Web Vitals, navigation timings) from the visitor browser to Cloudflare edge endpoints
- Server location
- Cloudflare global edge network with the closest point of presence to the visitor; aggregated metrics stored in Cloudflare Analytics, configurable for EU only routing through the Data Localisation Suite
- Cookieless mode available
- Yes
- Data transferred outside the EU
- Cloudflare is a US company. Even with the Data Localisation Suite enabled, control plane and aggregated metrics may still be processed in the United States. Transfers rely on Standard Contractual Clauses and the EU-US Data Privacy Framework.
Cookies set (1)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| No cookies | None | N/A | Cloudflare Browser Insights operates entirely without cookies; this row documents that the beacon does not set or read any cookie on the visitor browser. |
Third-party domains contacted (3)
cloudflareinsights.comstatic.cloudflareinsights.comcloudflare.com
Frequently asked questions about Cloudflare Browser Insights
Can't find your question? Write to us, we answer fast.
What cookies does Cloudflare Browser Insights set?
None. Browser Insights is a cookieless beacon by design. It sends performance metrics to Cloudflare without writing any persistent identifier to the visitor browser.
Do I need consent to use Cloudflare Browser Insights?
Article 5(3) of the ePrivacy Directive does not apply because there is no cookie or local storage write. The processing of timing data and visitor IP can be relied upon under legitimate interest, with documentation and an objection mechanism.
What is the legal basis for processing data through Browser Insights?
Legitimate interest under article 6(1)(f) GDPR for cookieless performance monitoring, provided the data is not used for behavioural profiling or advertising and that retention is kept short.
Does Browser Insights transfer data to the United States?
Cloudflare is a US company. Even with the Data Localisation Suite, control plane and aggregated metrics may be processed in the US. Transfers rely on Standard Contractual Clauses and the EU-US Data Privacy Framework.
Do I need a DPIA for Cloudflare Browser Insights?
Generally no for the default cookieless beacon. A DPIA is appropriate only when Browser Insights is combined with other Cloudflare analytics that use identifiers, or when EU traffic is routed without the Data Localisation Suite.
How do I implement Browser Insights compliance correctly?
Document the beacon under legitimate interest, enable IP truncation, set short retention, mention it in the privacy notice, expose an objection mechanism and prefer the Data Localisation Suite for EU only routing.
What are the alternatives to Cloudflare Browser Insights?
Cookieless RUM alternatives include SpeedCurve, New Relic Browser, Datadog RUM with EU residency, Sentry Performance, Cabin Analytics and self hosted Boomerang or Open Telemetry browser SDKs.
How should I update my cookie policy when I deploy Browser Insights?
State that no cookies are set by Browser Insights, describe the metrics collected, name Cloudflare as a processor, document the legitimate interest basis and any US transfer along with the safeguards.
Juvo Leads
Juvo Leads is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Juvo Leads offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Juvo Leads empowers organizations to optimize strategy and maximize return on investment.
Glassbox
Glassbox is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Glassbox supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Glassbox enables informed decisions that improve experience and drive results.
API Spreadsheets
API Spreadsheets is an integration and connectivity platform that enables businesses to connect web applications, APIs, and services seamlessly. It provides pre-built connectors, webhook management, and data synchronization. API Spreadsheets supports real-time data flow between marketing, sales, and operational tools, eliminating data silos and manual processes. With visual workflow builders and robust API management, API Spreadsheets helps create unified digital ecosystems that drive efficiency.
ip-label
ip-label is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. ip-label offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, ip-label empowers organizations to optimize strategy and maximize return on investment.
Baidu Analytics
Baidu Analytics is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Baidu Analytics offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Baidu Analytics empowers organizations to optimize strategy and maximize return on investment.
Tinybird
Tinybird is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Tinybird supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Tinybird enables informed decisions that improve experience and drive results.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.