Privacy

Last updated 2026-11-02

What is recorded

Two kinds of logs are kept.

Connection log. At the TCP ingress, one record per connection: source address, the requested server name, bytes sent and received, and connection duration.

Request log. At the web layer, one record per request: time, method, path, status, bytes sent, TLS version and user agent.

Query strings are not written to either log. Object URLs carry their signature in the query string, so signatures do not end up in logs.

Retention

Both logs rotate daily and are kept for 14 days, after which they are deleted.

What is not collected

No cookies, no analytics scripts, no third-party fonts, no tracking pixels, no account data, no device identifiers and no behavioural profiles. Object content is supplied by the origin; the edge does not inspect or index it.

Third parties

No content from third-party domains is loaded by these pages. The delivery hostname does not embed external scripts or fonts.