The information in the cookie (other than time-related information) is encrypted and can only be decrypted by Cloudflare.Ī separate _cf_bm cookie is generated for each site that an end user visits, as Cloudflare does not track users from site to site or from session to session. The cookie contains information related to the calculation of Cloudflare’s proprietary bot score and, when Anomaly Detection is enabled on Bot Management, a session identifier. This cookie expires after 30 minutes of continuous inactivity by the end user. The _cf_bm cookie is necessary for these bot solutions to function properly. Cloudflare places the _cf_bm cookie on end-user devices that access customer sites protected by Bot Management or Bot Fight Mode. _cf_bm cookie for Cloudflare bot productsĬloudflare’s bot products identify and mitigate automated traffic to protect your site from bad bots. Currently Cloudflare only supports Session Affinity in “orange-cloud” (proxied) mode. This cookie is a session cookie that lasts from several seconds up to 24 hours. This allows the end user to have a seamless experience (for example, this cookie is used for keeping an end user’s items in a shopping cart while they continue to navigate around the website). The _cflb cookie allows Cloudflare to return an end user to the same customer origin for a specific period of time configured by the customer. In the event of a failover, Cloudflare sets a new _cflb cookie to direct future requests to the failover pool. Cloudflare routes future requests to the same origin, optimizing network resource usage.

When enabling session affinity with Cloudflare Load Balancer, Cloudflare sets a _cflb cookie with a unique value on the first response to the requesting client. _cflb cookie for Cloudflare Load Balancer session affinity Understanding the Cloudflare CookiesĪs defined in our Privacy Policy External link icon Open external link, the _cflb, _cf_bm, cf_ob_info and cf_use_ob, _cfwaitingroom, and _cfruid cookies are strictly necessary to provide the services requested by our customers.Īs mentioned in our Privacy Policy, Cloudflare encourages our customers to disclose the use of these cookies to their end users and, in some jurisdictions, customers may be required by law to disclose these cookies to their end users.Ĭookie data is processed in Cloudflare’s data center in the United States and is subject to the cross-border data transfer section 7 of the Cloudflare Privacy Policy External link icon Open external link. Cloudflare uses various cookies to maximize network resources, manage traffic, and protect our customers’ sites from malicious traffic.

Cookie viewer app