Skip to content
Features Pricing Free Cookie Scanner Consent Mode Checker Script Audit TCF String Decoder Cookie Database GDPR Scanner Compliance Blog
Start Free → Login
Necessary

"__cfduid" Cookie

Cloudflare (deprecated)

Description

Former Cloudflare security cookie.

Details

Cookie Name
__cfduid
Category
Necessary
Service
Cloudflare (deprecated)
Duration
30 days
Data Source
Manual

Consent Requirement

This cookie is classified as necessary and typically does not require consent. It is essential for basic website functionality.

Consent Requirements by Regulation

GDPR & ePrivacy (EU)

Exempt from prior consent under the strictly necessary exemption (ePrivacy Directive Article 5(3)), provided __cfduid is genuinely required for the service the visitor requested. It must still be listed in your cookie policy.

UK GDPR & PECR

Exempt from consent under PECR Regulation 6(4) when strictly necessary. Disclosure in your cookie policy is still required.

CCPA/CPRA (California)

No opt-out is required for strictly necessary cookies, but __cfduid must be disclosed in your privacy policy.

Managing __cfduid with a Consent Banner

A consent management platform lists __cfduid in the banner's cookie table under the necessary category. Because it is strictly necessary, it stays active without an opt-in, but disclosing it keeps your cookie policy accurate. Kukie.io's scanner detects it automatically and keeps the disclosure up to date as your site changes.

Frequently Asked Questions

Does the __cfduid cookie require consent?
No. __cfduid is classified as strictly necessary, so it can be set without prior consent under GDPR and PECR. It must still be listed in your cookie policy.
How long does the __cfduid cookie last?
__cfduid typically persists for 30 days. The exact lifetime can vary with the site's configuration and the version of the script that sets it.
Who sets the __cfduid cookie?
__cfduid is set by Cloudflare (deprecated). It is categorised as necessary.
How do I block or delete the __cfduid cookie?
Visitors can delete __cfduid at any time through their browser's cookie settings. Site owners can keep it blocked until consent with a consent management platform: Kukie.io's auto-blocking holds necessary cookies back until the visitor opts in.

Need help?

Discover all cookies on your site automatically and create a compliant consent banner.

Scan Your Website

Automatically manage consent for this cookie

Kukie.io handles cookie detection, categorisation, and consent collection - all in one platform.

Get Started Free

Listed On