FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Security

Combahton FlowShield

EssentialOfficial website

Combahton FlowShield is a security and bot mitigation service. This page explains its cookies, your GDPR and ePrivacy obligations, data transfers and how to deploy it with valid consent.

Block Combahton FlowShield until consentScan my site
Overview

What does Combahton FlowShield do?

What Combahton FlowShield is and how it works

Combahton FlowShield is a security and bot mitigation service operated by Combahton GmbH. It sits in front of your website to filter malicious traffic, absorb denial of service attacks and challenge suspicious visitors before they reach your origin server.

What data and cookies Combahton FlowShield processes

To tell humans and bots apart, Combahton FlowShield processes connection metadata such as the visitor IP address, the user agent and request patterns, and it stores a strictly necessary cookie that records the result of a security challenge.

GDPR and ePrivacy implications

Filtering traffic means processing IP addresses, which are personal data under the GDPR, so you need a lawful basis. Most operators rely on legitimate interest in network and information security, recognised in Recital 49 GDPR.

Do you need consent

The cookies Combahton FlowShield needs are strictly necessary for the service to work, so they are exempt from prior consent under the ePrivacy rules, but you must still inform visitors about them.

International data transfers

Combahton operates its filtering network from data centres in Germany, so visitor traffic stays within the European Union. Even so, record the hosting location in your records of processing to demonstrate accountability under Article 30 GDPR.

How to stay compliant with Combahton FlowShield

Configure Combahton FlowShield so the security cookie is described in your cookie policy, keep challenge logs no longer than necessary, sign a data processing agreement with Combahton GmbH and confirm where traffic is filtered so you can document any transfer.

Compliance

Combahton FlowShield and the GDPR

Legal basis
Legitimate interest (Art. 6(1)(f) GDPR)
Risk level
low
Applicable regulations
GDPR, ePrivacy Directive (Cookie Law)

Impact assessment (DPIA)

Combahton FlowShield is limited in scope and low risk, so a full DPIA is usually not required, but you should document your screening decision to evidence accountability.

Sample text for your banner

We use Combahton FlowShield to protect the site against fraud and automated attacks. With your consent we store the cookies described in our cookie policy. You can accept, refuse or withdraw your choice at any time.
Cookies and trackers

What Combahton FlowShield sets and contacts

Tracking method
Server side traffic filtering with a strictly necessary security cookie
Server location
Germany (Combahton GmbH)

Cookies set (2)

NameTypeDurationPurpose
__flowshieldStrictly necessary30 minutesStores the outcome of the bot mitigation challenge so a verified visitor is not challenged again on every request
__fs_rlStrictly necessary10 minutesHolds a short lived rate limiting token used to throttle abusive automated requests

Third-party domains contacted (2)

  • flowshield.io
  • combahton.net
Questions

Frequently asked questions about Combahton FlowShield

Can't find your question? Write to us, we answer fast.

What cookies does Combahton FlowShield set?

Combahton FlowShield sets the following cookies: __flowshield, __fs_rl. Each one is listed in the cookie table on this page with its type, duration and purpose, and you should mirror that list in your own cookie policy.

Is consent required to use Combahton FlowShield?

No prior consent is needed for the strictly necessary cookies Combahton FlowShield uses to function, but you must still describe them in your privacy and cookie policy under the transparency rules.

What is the legal basis for Combahton FlowShield?

The lawful basis is Legitimate interest (Art. 6(1)(f) GDPR). Record this basis in your records of processing and state it in the privacy notice shown to visitors.

Does Combahton FlowShield transfer data to a third country?

By default no transfer to a third country takes place. Combahton operates its filtering network from data centres in Germany, so visitor traffic stays within the European Union. Reassess if you later enable an external integration.

Do I need a DPIA for Combahton FlowShield?

A DPIA is usually not required for Combahton FlowShield on its own because the processing is limited and low risk, but document your reasoning.

How do I implement Combahton FlowShield in a compliant way?

Implement Combahton FlowShield through your consent layer: keep strictly necessary functions always on, gate optional ones behind consent, sign a data processing agreement with Combahton GmbH where it acts as a processor and keep your cookie policy in sync with the real cookies.

What are the alternatives to Combahton FlowShield?

Alternatives include other anti bot and denial of service providers such as Cloudflare, Akamai or self managed rate limiting. They follow the same legitimate interest logic, so the compliance steps are similar.

How do I update my cookie policy for Combahton FlowShield?

List every cookie Combahton FlowShield sets in your cookie policy with its name, purpose and retention, state the legal basis, name Combahton GmbH where relevant, and update the policy whenever the tool changes so refusals in your banner are always honoured.

Same category

More services: Security

See the whole category

SEON

Seon is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Seon supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Seon ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Essential

ARCaptcha

ARCaptcha is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. ARCaptcha integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, ARCaptcha helps organizations maintain robust websites that meet user expectations and technical requirements.

Essential

Auth0

Auth0 is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Auth0 offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Auth0 empowers organizations to optimize strategy and maximize return on investment.

Essential

DDoS-Guard

DDoS-Guard is a comprehensive web security solution that protects websites and applications from cyber threats including DDoS attacks, SQL injection, and cross-site scripting. It provides web application firewall (WAF) capabilities, real-time threat detection, and automated incident response. DDoS-Guard offers SSL/TLS encryption, bot management, and security monitoring. With compliance reporting and vulnerability scanning, DDoS-Guard strengthens your overall security posture.

Essential

Venly

Venly is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Venly is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Venly offers reliable solutions that scale with organizational needs and evolving web standards.

Essential

Bugcrowd

Bugcrowd is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Bugcrowd integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Bugcrowd helps organizations maintain robust websites that meet user expectations and technical requirements.

Essential

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site