Last updated: September 24, 2026. This Privacy Policy details the data handling, storage practices, and network communications of the Cloudflare CLI executable and documentation website.
Cloudflare CLI contains zero analytics beacons, zero tracking scripts, and zero telemetry collection. The tool operates strictly locally on your machine. Network calls are made exclusively to the official Cloudflare API endpoint (https://api.cloudflare.com/client/v4/) or to an explicit custom endpoint configured via --endpoint or CLOUDFLARE_API_URL.
Cloudflare API tokens represent sensitive credentials. By default, Cloudflare CLI delegates token storage directly to your host operating system's native credential keystore: macOS Keychain via the security subsystem, Windows Data Protection API (DPAPI) encrypted under user-specific credentials, or Linux Secret Service via libsecret. Tokens are never stored in plain text unless explicitly opted into via CLOUDFLARE_ALLOW_PLAINTEXT_STORE=1.
Non-sensitive metadata (such as profile names, account IDs, and timestamps) is stored in an owner-restricted YAML configuration file (chmod 0600 on POSIX systems) located in standard system application directories (e.g. ~/Library/Application Support/cloudflare-cli on macOS, ~/.config/cloudflare-cli on Linux, or %APPDATA%\cloudflare-cli on Windows).
This documentation website is hosted on GitHub Pages and contains no cookies, external tracking tags, or user fingerprinting scripts.