ON 1 April 2026, Cloudflare reaffirmed its ongoing privacy commitments for the 1.1.1[.]1 public DNS resolver, sharing the results of its latest independent privacy examination. The company states that the core guarantees remain unchanged and have been confirmed by the independent review, including that Cloudflare will not sell or share public resolver users’ personal data with third parties or use it to target advertisements.
It also reiterates that it will only retain or use what is being asked, not information that identifies who is asking, and that source IP addresses are anonymised and deleted within 25 hours. The disclosure notes that randomly sampled network packets (at most 0.05% of traffic, including the querying IP address) are used solely for network troubleshooting and attack mitigation, and that the examination focused exclusively on privacy commitments. The final report and related evidence were prepared after the 2024 calendar year and are available on Cloudflare’s compliance resources page.