Necessary

"_cfuvid" Cookie

Cloudflare

Description

Used by Cloudflare WAF for rate limiting.

Details

Cookie Name: _cfuvid
Category: Necessary
Service: Cloudflare
Duration: session
Data Source: Manual

Consent Requirement

This cookie is classified as necessary and typically does not require consent. It is essential for basic website functionality.

Consent Requirements by Regulation

GDPR & ePrivacy (EU)

Exempt from prior consent under the strictly necessary exemption (ePrivacy Directive Article 5(3)), provided _cfuvid is genuinely required for the service the visitor requested. It must still be listed in your cookie policy.

UK GDPR & PECR

Exempt from consent under PECR Regulation 6(4) when strictly necessary. Disclosure in your cookie policy is still required.

CCPA/CPRA (California)

No opt-out is required for strictly necessary cookies, but _cfuvid must be disclosed in your privacy policy.

Managing _cfuvid with a Consent Banner

A consent management platform lists _cfuvid in the banner's cookie table under the necessary category. Because it is strictly necessary, it stays active without an opt-in, but disclosing it keeps your cookie policy accurate. Kukie.io's scanner detects it automatically and keeps the disclosure up to date as your site changes.

Frequently Asked Questions

Does the _cfuvid cookie require consent?

No. _cfuvid is classified as strictly necessary, so it can be set without prior consent under GDPR and PECR. It must still be listed in your cookie policy.

How long does the _cfuvid cookie last?

_cfuvid typically persists for session. The exact lifetime can vary with the site's configuration and the version of the script that sets it.

Who sets the _cfuvid cookie?

_cfuvid is set by Cloudflare. It is categorised as necessary.

How do I block or delete the _cfuvid cookie?

Visitors can delete _cfuvid at any time through their browser's cookie settings. Site owners can keep it blocked until consent with a consent management platform: Kukie.io's auto-blocking holds necessary cookies back until the visitor opts in.