Traffic measurement privacy

u64.cam runs a transparent experiment to understand how people, crawlers, feed readers, and AI agents discover public pages. Page requests pass through Cloudflare; selected request metadata is written to a private Cloudflare Analytics Engine dataset for up to three months.

Recorded

• Path without its query string, HTTP method, response status, and broad route category.
• Truncated User-Agent, Accept header, primary accepted language, and request purpose header.
• Referrer origin only; referrer paths and query strings are discarded.
• Country, Cloudflare data center, ASN and network organization, HTTP protocol, and TLS version.
• Cloudflare verified-bot, signed-agent, and bot-score signals when the account plan provides them.

Not recorded by this experiment

• Raw IP addresses, cookies, URL query strings, or stable visitor identifiers.
• Guestbook form bodies, names, notes, or other submitted fields.
• City, postal code, latitude/longitude, TLS fingerprints, or browser storage.

The fields are used to compare discovery channels such as normal pages,robots.txt, sitemaps,llms.txt, canary pages, and theguestbook. User-Agent and network metadata are hints, not proof of a scraper's identity, and may be spoofed or proxied.