BrevFeed
Sign in
← All stories
● Covered by 1 source · 1 reportLow impact1 negative

Cloudflare reportedly injects analytics JavaScript by default when nameservers are switched

🔄 Updated 1h ago
Aggregated by BrevFeed cloud · updated 1h ago
🔖 Save
New to BrevFeed? We gather this story from every outlet covering it into one summary — ranked by real-world impact, not just the latest headline — so you never miss what matters. What is BrevFeed? →

Key points

  • Cloudflare injected a JS analytics snippet into a user's site.
  • The injection occurred after switching nameservers to Cloudflare.
  • Users must opt-out of this feature via the Analytics dashboard.
  • The user described the approach as invasive.

Automatic Analytics Injection Reported

A user reported that Cloudflare automatically injected a JavaScript analytics snippet into their website. This occurred immediately after they switched their site's nameservers to Cloudflare, a step taken to enable R2 bucket serving through a custom subdomain.

Opt-Out Requirement

The user discovered the analytics snippet on their HTML-only, JavaScript-free site. To remove the snippet, they had to navigate to the Cloudflare Analytics dashboard, add their site to the analytics service, and then manually disable the snippet. This process indicates an opt-out mechanism rather than an opt-in for the analytics feature.

User Concern and Impact

The user expressed concern over this default behavior, labeling it as invasive. They suggested that such features should require explicit user consent (opt-in) rather than being enabled by default and requiring users to actively disable them (opt-out). This report serves as a warning to other Cloudflare users who might be unaware of this automatic injection.

✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →

Keep reading

ai Cloudflare Introduces Tools for an "Agentic Internet" to Support AI Agents 2d ago ai Cloudflare Introduces Agent Tracing and Local Debugging for AI Agents on Workers 1d ago ai Cloudflare Open-Sources AI Productivity Platform Cloudflare OS for Enterprise Use 2d ago cloud Cloudflare Migrates cdnjs to Its Developer Platform, Serving 9 Billion Daily Requests 2d ago security Cloudflare open-sources 'pvcli' debugger for OHTTP and MASQUE privacy protocols 20d ago

The daily brief

One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.

One email a day. Unsubscribe in one click, any time.

Today's brief

Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.

~11 min · 9 stories · Aug 16

▶ Play today's brief Listen on Spotify

New every morning, and the back catalogue is archived by date.

Primary sources

GitHub HackerNews/API

Reporting from

Hacker News Front Page — Tell HN: Cloudflare silently injects its analytics when you switch nameservers 💬 Discuss on HN 5h ago →

A user reported that Cloudflare automatically injected a JavaScript analytics snippet into their website after switching nameservers to Cloudflare. This behavior requires users to opt-out manually through the Analytics dashboard rather than opting in.