Does the __cflb cookie need consent?

Usually yes. __cflb is a functional cookie, and unless it is strictly necessary for a feature the visitor asked for, it needs consent before it is set.

How long does the __cflb cookie last?

__cflb usually lasts until the browser closes. The exact lifetime depends on the site's settings and the version of the script that sets it.

Who sets the __cflb cookie?

__cflb is set by Cloudflare. It is in the Functional category.

How do I block or delete the __cflb cookie?

Visitors can delete __cflb in their browser's cookie settings. On your own website, a consent banner can keep the script that sets it waiting until the visitor accepts functional cookies. Kukie.io's banner does this for known trackers by default, and for any other script you tag with its category.

Functional

__cflb cookie

Set by Cloudflare.

What it does

When enabling session affinity with Cloudflare Load Balancer, Cloudflare sets a __cflb cookie with a unique value on the first response to the requesting client. Cloudflare routes future requests to the same origin, optimizing network resource usage. In the event of a failover, Cloudflare sets a new __cflb cookie to direct future requests to the failover pool.

Cookie name: __cflb
Category: Functional
Provider: Cloudflare
Duration: session
Data source: Open Cookie Database (opens in a new tab)

Consent

Usually needed

__cflb is in the Functional category. Functional cookies usually need the visitor's consent, unless the cookie is strictly necessary for something the visitor asked for, such as remembering a language they just chose.

GDPR and ePrivacy (EU): Consent is needed before setting __cflb, unless it is strictly necessary for a feature the visitor asked for, such as remembering a language they just chose.
UK GDPR and PECR: The same as in the EU: consent first, unless the cookie qualifies for the strictly necessary exemption.
CCPA and CPRA (California): Disclose __cflb in your privacy policy. If the data it stores is shared with third parties, honour opt-out requests, including the Global Privacy Control signal.

Managing __cflb with a consent banner

A consent banner can keep the script that sets __cflb waiting until the visitor accepts functional cookies. Kukie.io's cookie scanner finds __cflb and sorts it into a category. The banner holds back known trackers by default, and any other script you tag with its category waits too.

Learn more about script blocking

Related cookies