Does the __cfruid cookie need consent?

Usually not. __cfruid is in the Essential category, and strictly necessary cookies are exempt from consent under the ePrivacy Directive and PECR. It must still be listed in your cookie policy.

How long does the __cfruid cookie last?

__cfruid usually lasts until the browser closes. The exact lifetime depends on the site's settings and the version of the script that sets it.

Who sets the __cfruid cookie?

__cfruid is set by Cloudflare. It is in the Essential category.

How do I block or delete the __cfruid cookie?

Visitors can delete __cfruid in their browser's cookie settings, although the website may not work properly without it. A consent banner lists it under Essential, which is always active, so it is not blocked.

Essential

__cfruid cookie

Set by Cloudflare.

What it does

Used by Cloudflare for rate limiting.

Cookie name: __cfruid
Category: Essential
Provider: Cloudflare
Duration: session
Data source: Kukie.io

Consent

Usually not needed

__cfruid is in the Essential category. Strictly necessary cookies are exempt from consent under Article 5(3) of the ePrivacy Directive, as long as the cookie is really needed for the service the visitor asked for. It still belongs in your cookie policy.

GDPR and ePrivacy (EU): Exempt from prior consent under the strictly necessary exemption (Article 5(3) of the ePrivacy Directive), as long as __cfruid is really needed for the service the visitor asked for. It must still be listed in your cookie policy.
UK GDPR and PECR: Exempt from consent under PECR Regulation 6(4) when strictly necessary. It must still be listed in your cookie policy.
CCPA and CPRA (California): No opt-out is needed for a strictly necessary cookie, but __cfruid must be disclosed in your privacy policy.

Managing __cfruid with a consent banner

A consent banner lists __cfruid in its cookie table under Essential, the category that is always active. Because it is strictly necessary, it works without an opt-in, and listing it keeps your cookie policy accurate. Kukie.io's cookie scanner finds it when it scans your website.

Learn more about script blocking

Related cookies