COMPANY PROFILE

Cloudflare

Headquarters: San Francisco, United States · Founded: 2009 · Listed: NYSE: NET

1 fine or sanction1 data breach

What it does and how it makes money

Cloudflare runs a global network that sells companies and organisations content delivery, security (DDoS protection, firewall), DNS and connectivity services for their websites, applications, networks and employees.

It charges customers subscriptions for its network and security services; it also offers free plans. ^[1]

What data it collects about you

According to its privacy policy, it processes the IP addresses and traffic data of people visiting its customers' sites (as a processor for those customers) and collects contact, billing, activity-log and cookie data about its customers and visitors to its own website. ^[2]

Money

Fines and sanctions

In total: 14 million EUR

• AGCOM (Autorità per le Garanzie nelle Comunicazioni) · Italy · December 29, 202514 million EUR
  Fine for not complying with the obligations of Italy's "Piracy Shield" anti-piracy system (registering and blocking sites, including on its 1.1.1.1 DNS). Appealed by Cloudflare in March 2026. ^[4]

Data breaches and hacks

• February 2017
  A bug in its HTML parser ("Cloudbleed") leaked memory fragments with data from visitors to customer sites between September 2016 and 18 February 2017, such as cookies, authentication tokens, API keys and form data that could include passwords; some was cached by search engines. ^[5]

Ask it to delete your data

With GUARDIANA or GUARDIANA ZERO, you download from this same profile the letter asking it to delete your data, under your country’s law, ready to attach to an email.

Its website

https://www.cloudflare.com/

Sources

1. https://www.businesswire.com/news/home/20260210624682/en/Cloudflare-Announces-Fourth-Quarter-and-Fiscal-Year-2025-Financial-Results/
2. https://www.cloudflare.com/privacypolicy
3. https://www.sec.gov/Archives/edgar/data/1477333/000147733326000016/cloud-20251231.htm
4. https://blog.cloudflare.com/standing-up-for-the-open-internet/
5. https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/

What this profile does NOT say

• It does not say this company does anything illegal. The only thing it states about anyone’s legality is what a regulator or a court has already decided, with the date and the link to the source.
• It does not say what data of yours it holds: only the company knows, which is why you have the right to ask it.
• If you are this company and a fact is wrong, write to hola@guardianagroup.com and it will be corrected, with its date.

Public facts with their sources, checked on October 12, 2026. All profiles →