What is the `__cfruid` cookie?no consent needed

Set by Cloudflare (Cloudflare, Inc.). Expires after Session.

Strictly necessary — it can load freely

Cookies essential to the service are exempt from consent under ePrivacy Art. 5(3) — but __cfruid must still be disclosed in your cookie policy.

Purpose

Identifies trusted web traffic for Cloudflare's rate limiting.

Cookie details

Cookie name: __cfruid
Service: Cloudflare
Provider: Cloudflare, Inc.
Category: Strictly Necessary
Duration: Session
Consent: Not required

GDPR requirements

Strictly necessary cookies are essential for the website to function and cannot be switched off. They are set only in response to actions made by you — such as logging in or filling forms. No consent is required.

For __cfruid to be compliant, it must be:

May be set as soon as the visitor arrives — no consent needed
Still disclosed in your cookie policy, with what it does and why it is necessary
Not shown as a toggle in your consent banner

How to handle it

1
Let it load freely
No consent gate is needed for this cookie.
2
Disclose it
List it in your cookie policy as strictly necessary for Cloudflare.
3
Keep it out of the toggles
Strictly necessary cookies shouldn't be switchable in your consent UI.