This project records technical HTTP exchange metadata for research into automated web traffic. Collection includes source IP addresses, request paths and query strings subject to size limits, bounded request and response headers, Cloudflare-provided network and request metadata, and timing and response status information.
Headers are subject to count and size limits. Known credential header values, including Authorization, Proxy-Authorization, API key, and authentication token headers, are redacted. Cookie values are omitted; only valid cookie names are retained. Set-Cookie values are redacted. Request bodies are not read.
Raw data are not published.
Baseline_0 is a limited discovery period lasting at most seven days. After the baseline, the collected data will be profiled and further retention and data minimization will be reviewed. The seven-day collection limit does not define an automatic deletion date for raw data.