Cloudflare's privacy-first Web Analytics opens up to everyone
Back in September, Cloudflare teased a new, free Web Analytics product designed for the entire web. Today, that product is officially available to everyone, even if you don’t use Cloudflare’s DNS services. The service functions like most other analytics tools: you add a small HTML snippet to your site, and Cloudflare begins collecting visitor data.
This move addresses a long-standing gap in the analytics market. Most free tools are built on an ad-driven business model, using visitor data to create buyer profiles for retargeting campaigns. Cloudflare has no interest in that trade. The company does not track users for advertising purposes, does not sell data, and does not rely on cookies or other client-side state to generate reports.
Core metrics and reporting features
The dashboard answers two fundamental questions: how much traffic did the site receive, and how many distinct visits occurred. Cloudflare tracks page views—the total number of times pages were loaded—and visits, which count instances where a user landed from an external site. Users can switch between these views and access breakdowns by top pages, countries, device types, and referrers.
More useful is the ability to apply global filters and drill into specific data points with zoom and group by actions. For instance, after sending a newsletter, you could filter to a particular blog post, then group by top pages, and finally view which sites are sending the most referrals. These are quick, inline actions rather than buried menu options.
How the new analytics works
Cloudflare’s traditional analytics operate at the network edge, capturing all traffic—including requests from clients that block JavaScript—while also blocking bots via the WAF and measuring origin performance. The new standalone product is a client-side measurement tool, similar to Cloudflare’s own Browser Insights, which was previously limited to orange-cloud (proxied) users.
For non-Customers, the advantage is clear: by adding a JavaScript snippet, any site can start sending data without making any DNS changes or adopting other infrastructure services. The product leverages Cloudflare’s ABR technology to handle traffic at any scale, from a single request to a billion per day, without imposing traffic-based limits.
Setup and current limitations
Getting started is straightforward. After signing up, you enter your domain name—Cloudflare uses it to filter out spam analytics. The service then displays a script tag to embed before the closing </body> tag of the pages you want to measure.
One notable constraint remains: at launch, each Cloudflare account can only associate analytics with one website. Multi-property support is expected within a few weeks.
Privacy model built on "visits"
Cloudflare’s privacy stance is strict in a few important ways. The service does not use cookies or localStorage for analytics, and it avoids fingerprinting tactics—such as tracking IP addresses or User Agent strings over time—which the company argues are even more intrusive because users cannot easily opt out.
That is where the "visit" metric becomes central. Instead of counting unique IPs or maintaining state about individual user behavior, Cloudflare defines a visit as a page view that originated from an external site. This yields a practical traffic metric without requiring persistent tracking of any single person.
Roadmap
The current release is just the groundwork. Cloudflare plans deeper integration with its existing security and performance products, adding detailed metrics beyond raw traffic counts. Future improvements include real-time analytics, custom alerts, and richer standalone functionality.
