Announcing the Results of the 1.1.1.1 Public DNS Resolver Privacy Examination
Mar 31, 2020John Graham-Cumming

Summary
This post details the results of an independent examination of Cloudflare's 1.1.1.1 public DNS resolver privacy commitments. It confirms that personal data is not retained and that IP addresses are truncated and anonymized for network troubleshooting and DoS mitigation. Commitments regarding data handling and retention have been clarified and refined, including specific details on IP truncation, log retention periods, and data sharing with APNIC for research purposes. The post also acknowledges past ambiguities in communication regarding anonymous log data handling and outlines updated privacy commitments.
More from the DNS Infrastructure & Naming Conventions trail
- The keys to the Internet change on October 11, 2026. Are you ready?
- 1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it
- How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache
- BGP ORIGIN attribute manipulation and its impact on the Internet
- Cloudflare Internal DNS is now generally available