Cloudflare Turnstile

Functional

Privacy-preserving CAPTCHA alternative from Cloudflare.

How to block it until consent

Turnstile does not require consent for basic bot protection. Sets cf_clearance only on challenge resolution. Recommended replacement for reCAPTCHA on forms.

Detection signals

Host domains

challenges.cloudflare.com

Cookies set

cf_clearance
__cf_bm

Request patterns

/turnstile/v0/api.js
/turnstile/

Categorisation follows common EU/DPC guidance. Your specific deployment may change the category (e.g. Stripe on a checkout page vs. a marketing page).