Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Privacy

> Bandwidth Saver respects your privacy and your visitors’ privacy: Does not track visitors...Does not collect analytics

Wouldn't this cause a site's visitors to send traffic to cloudflare in situations where they wouldn't otherwise, allowing cloudflare to log their IP, timestamp, and the image requested, along with any other data in the request header? If this plugin wasn't used on the site cloudflare wouldn't get/log/track any of that. I'm not sure that handing all that data over to a third party (especially one as large and centralized as cloudflare) is compatible with respecting visitor's privacy. At the very least, site owners should be made aware of the fact that this is data will end up being shared.



This is true, I still try to be clear about that:

"External Services

This plugin connects to external services to deliver images:

Cloudflare R2 & Workers

Purpose: Stores and serves cached images from 300+ global locations Provider: Cloudflare, Inc. Terms: cloudflare.com/terms Privacy: cloudflare.com/privacypolicy"


My impression was that this would be used by sites already proxied by cloudflare, so this already happens.

But perhaps it is a separate thing that can be used regardless of your dns?


Right. The target user is not using Cloudflare nameservers.


I came here to say this. I find the following to be quite misleading:

Bandwidth Saver respects your privacy and your visitors’ privacy:

    Does not track visitors
    Does not use cookies
    Does not collect analytics
    Does not phone home

Because all that tracking and data collection will be done by Cloudflare (a company subject to the CLOUD act) instead.


Noted. I agree the current wording is not clear enough about what Cloudflare logs. I am going to rewrite that section so it is more explicit.


You could also add this to the section "Who This Is NOT For":

Sites that do not want to disclose their visitor data to the US company Cloudflare.


I just want to say that I really appreciate your willingness to take feedback on this issue. There's little to no accountability when products are misleading or even outright hostile on privacy issues so taking the time to address this and make things clear to users says a lot about the kind of person you are.


Thanks, I appreciate that. I went ahead and updated the readme and the plugin text so the privacy section is clearer about what Cloudflare logs and what the plugin itself does or does not do. I want people to understand exactly what they’re opting into, so this feedback really helped.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: