Counting visits on a Cloudflare site with no third party script and no cookies
Web Analytics loads from a host your CSP and every blocker list can refuse. A Worker on a path of your own site counts views, short links and QR scans instead.
Web Analytics loads from a host your CSP and every blocker list can refuse. A Worker on a path of your own site counts views, short links and QR scans instead.
The TDS Worker sends a visitor to the offer and sees nothing after. A signed click token and a postback bring the sale back to the rule, the split and the ad network.
Your domain can point at any host and still have every visitor sorted by country, device and bot class first. How the 301.st TDS does it, step by step.
Bot analytics tools put a Worker in front of all your traffic. What that does to the free quota and your visitors' data, and what Cloudflare shows for free.
We broke a hostname for forty minutes with Cloudflare's free outage alert switched on, and it stayed silent. What Free watches, and a Worker that checks redirects.
Verisign lifts the .com wholesale price from $10.26 to $10.97 on 1 November, the first of up to four steps. The registry contract lets you renew at today's price.
Since March no public certificate lives longer than 200 days, and the first short ones have already expired. One script sorts your domains by who renews them.
Cloudflare documents a fifty domain threshold before pending zones block new ones. A scoped token hits it on the second domain. How to check, and the way around it.
Active means the rule was saved, not that a request ever reached it. Four questions that find the reason, each answered by one request. Measured live.
uuidv4() is banned in redirect targets, but cf.ray_id is not: a Single Redirect can stamp every click with its own id. Measured live, with the traps.
Moving off a VPS feels like a leap of faith. Task by task — site, TLS, DNS, redirects, cron, mail, storage, small APIs — what the free plan covers and where it bites.
The 2026-07-28 revision made MCP stateless, and Cloudflare deprecated its Durable Object path a day earlier. We built a zero dependency server and metered it.
Years of unanswered threads, even a €100 bounty on the question. The loop that closes it: a redirect hop that mints a click_id and takes the postback.
Auto-renew is a standing instruction, not a safety net: it fails on a dead card, a lost renewal email, or a domain you forgot. What actually catches an expiry.
The expired-domain redirect Google now penalizes, the consolidation it still blesses, and how to point the domains you own at one site on Cloudflare.
The zone is green and the rule is there, yet visitors get an error or the wrong page. Three ways a Cloudflare redirect quietly fails, and one curl to tell them apart.
The dashboard has no cross-domain view. One script says which of 300 domains still answer, and Ahrefs' now-free DR endpoint says which ones are worth fixing.
Cloudflare's scanner runs 21 checks. Four were worth fixing on a static docs site, and the fixes exposed two Pages traps. The rest were correct to fail.
Web Analytics, Plausible and Umami are page beacons, so a 301 is invisible to all of them. A Worker plus Analytics Engine counts it on the free plan.
Every domain is its own zone, Cloudflare throttles how fast you can add them, and presetting nameservers gets you the wrong pair. The order that works.
Single Redirects, Bulk Redirects, Snippets, Workers, _redirects and the origin, compared on scope, free plan quota, matching power and the thing that catches people out.
Google Ads flags redirects that drop click IDs and tells you to ask IT. Here is how to find the hop that drops them yourself, with curl, in about a minute.
Cloudflare's docs mark Page Rules deprecated and name a replacement for almost every setting. Five have no replacement at all, and the automatic migration drops them.
Cloudflare raised the free plan Bulk Redirects quota to 10,000 in February 2025. The rollout did not reach every account. How to check yours, and how to get it fixed.