Cloudflare is a Big Tech company (first red flag) based in USA (second red flag) and Big Tech are known for giving not popular things like privacy concerns.
When it comes to Cloudflare, they decrypt your HTTPS traffic in order to process the data (a very BIG red flag). And you can't do shit about other than refuse to use Cloudflare on your website.
But how often will that happen with all the ignorant and careless people all around the world? Very rare! So I tend to just avoid the shit instead.
- https://medium.com/@PlanB./the-shocking-truth-about-cloudflares-role-in-your-privacy-no-one-s-talking-about-this-5efaca6bace0 (ye-ye, I know Medium is shit, but they can have good content).
- https://terms.law/Privacy-Watchdog/domain-hosting/cloudflare/
- https://discuss.privacyguides.net/t/cloudflare-protection-on-website/14531