Cloudflare Mines 1.1.1.1 Data

[amanda99]

https://radar.cloudflare.com/domains/domain/news.ycombinator.com

[perihelions]

Why are >97% of imslp.org lookups (the online sheet music archive) originating from Canada?

https://radar.cloudflare.com/domains/domain/imslp.org

edit: And 42% of lichess.org lookups are from Norway? That country is much too small for that to make sense.

https://radar.cloudflare.com/domains/domain/lichess.org

[amanda99]

Put a private domain there and it'll show you data from your usage of 1.1.1.1.

On their page however, they claim "By contrast, 1.1.1.1 does not mine user data. Logs are kept for 24 hours for debugging purposes, then they are purged." under "What makes 1.1.1.1 more secure than other public DNS services?" [0]

[0]: https://www.cloudflare.com/learning/dns/what-is-1.1.1.1/

[WesSouza → amanda99]

Can they argue that aggregated usage data does not constitute user data?

[amanda99 → WesSouza]

I imagine they had a lawyer clear this and so there must be some convoluted argument by which they think this is fine.

However, it still makes me lose trust in Cloudflare, this is pretty clear language to me that data is not used for anything but debugging, yet here we obviously see user data being mined for analytics.

[WesSouza]

From their privacy policy[1]:

> Cloudflare will only retain or use what is being asked, not information that will identify who is asking it.

It’s also not a good metric, given it’s biased on locations where people are more likely to use 1.1.1.1.

I see for example Brazil oddly ranks pretty high on many sites.

[1]: https://developers.cloudflare.com/1.1.1.1/privacy/public-dns...