Cloudflare Analytics

Common, and found on the lightest pages in the index

The unusual thing about this entry is not how often it appears but what it appears next to. The median site carrying Cloudflare Analytics reaches 6 outside companies over 27 third-party requests, with 1 classified as tracking. Against the other 87 companies in the index, that median company count ranks 79th and that request count 77th — near the bottom of both tables, meaning these are among the least loaded pages measured.

That follows from what the product is for. A site reaching for Cloudflare's own numbers is often a site that has not installed a separate analytics vendor, an ad stack or a tag manager. The index's vendor catalogue files this entry under Analytics and does not classify it as tracking.

494 of 507 had contact before the banner could be answered

Early contact happened on 494 of the 507 sites, 97.4%. Of the 88 companies here, that share ranks 13th, so it sits well up the table even though the pages themselves sit near the bottom of it.

The timing explains the combination. The median site made its first third-party contact 506 ms into the load, ranking 83rd of the 88 companies here and so sitting near the fast end of that table, and the earliest first contact anywhere in the group was 90 ms. A page with six third parties still has a first one, and on these pages it arrives early.

What a light page looks like up close

medium.com reached 2 outside companies in total, both inside the window, with first contact at 176 ms. roku.com also reached 2, both inside it. openai.com reached 3, all 3 inside it. canva.com reached 3 as well, at 1,254 ms. These are pages an ordinary reader would call clean, and they are still fully described before any banner could have been answered.

At the group's upper end the shape changes but the pattern does not. britannica.com reached 9 companies with all 9 inside the window behind an IAB TCF consent tool, okta.com 8 with all 8 inside it behind OneTrust, tandfonline.com 10 with all 10 inside it. nist.gov reached 5, 4 of them inside the window, with no banner detected. oxylabs.io is a partial exception at 12 companies with only 2 inside the window, and epicgames.com is the clearest counter-example in the set: 6 companies, none inside the window, first contact at 2,087 ms behind a OneTrust banner. name.com and patreon.com fall between.

Google is on three-quarters of the same pages

Across the 507 sites, Google was also present on 376 of them — 74.2%. OneTrust follows at 14%, jsDelivr at 10.1%, Amazon CloudFront at 7.9% and Meta Pixel at 7.5%, with Amazon Ads, Microsoft Clarity, Google Tag Manager, Sentry and Criteo each below 7%.

One very common neighbour and then a fast drop to single-digit percentages is the same story the medians tell. These are pages with few outside parties on them, and the party they most often share is the one nearly everything shares.

Banners, and what comes after them

A consent tool was detected on 235 of the 507 sites. An IAB TCF consent tool was seen on 116 of them and OneTrust on 79, with Cookiebot on 15, CookieYes on 11, and Usercentrics and Osano on 6 each. Those figures count sites where each tool was seen alongside the others rather than dividing the 235 into slices; a site can carry more than one banner.

After the consent window closes, the median site in this group adds no further companies at all. For the typical page here, the third-party set a visitor meets is settled before an answer is possible.

Seen on the same pages

Companies most often contacted by the same sites. Co-presence only — the crawl records what arrived, not who called whom.

• GoogleTogether on 376 of these sites
• OneTrustTogether on 71 of these sites
• jsDelivrTogether on 51 of these sites
• Amazon CloudFrontTogether on 40 of these sites
• Meta PixelTogether on 38 of these sites
• Amazon AdsTogether on 34 of these sites
• Microsoft ClarityTogether on 30 of these sites
• Google Tag ManagerTogether on 26 of these sites