I'd be very nervous if I was Cloudflare. They pretty explicitly say that the cookies are not strictly necessary for using the websites. > cookies are strictly

I'd be very nervous if I was Cloudflare. They pretty explicitly say that the cookies are not strictly necessary for using the websites. > cookies are strictly necessary to provide the services requested by our customers Cloudflare's customers are websites, not users, whereas the latter are protected by Cookie Law / GDPR. That's exactly why Microsoft was fined (according to [1]): > Microsoft argued that detecting ad fraud was "strictly necessary" for running bing.com, but the court disagreed, saying that advertising is not a service requested by the user. (point 53 in the full decision). [1] https://news.ycombinator.com/item?id=34096210 https://news.ycombinator.com/item?id=34096210