tools-only Configuration
Setup Methods
Proxied Sites (Automatic)
Dashboard → Web Analytics → Add site → Select hostname → Done
| Injection Option | Description |
|---|---|
| Enable | Auto-inject for all visitors (default) |
| Enable, excluding EU | No injection for EU (GDPR) |
| Enable with manual snippet | You add beacon manually |
| Disable | Pause tracking |
Fails if response has: Cache-Control: public, no-transform
CSP required:
script-src https://static.cloudflareinsights.com https://cloudflareinsights.com;
Non-Proxied Sites (Manual)
Dashboard → Web Analytics → Add site → Enter hostname → Copy snippet
<script defer src='https://static.cloudflareinsights.com/beacon.min.js'
data-cf-beacon='{"token": "YOUR_TOKEN", "spa": true}'></script>
Limits: 10 non-proxied sites per account
SPA Mode
Enable spa: true for: React Router, Next.js, Vue Router, Nuxt, SvelteKit, Angular
Keep spa: false for: Traditional multi-page apps, static sites, WordPress
Hash routing (#/path) NOT supported - use History API routing.
Token Management
- Found in: Dashboard → Web Analytics → Manage site
- Not secrets - domain-locked, safe to expose in HTML
- Each site gets unique token
Environment Config
// Only load in production
if (process.env.NODE_ENV === 'production') {
// Load beacon
}
Or use environment-specific tokens via env vars.
Verify Installation
- DevTools Network → filter
cloudflareinsights→ seebeacon.min.js+ data request - No CSP/CORS errors in console
- Dashboard shows pageviews after 5-10 min delay
Rules (Plan-dependent)
Configure in dashboard for:
- Sample rate - reduce collection % for high-traffic
- Path-based - different behavior per route
- Host-based - separate tracking per domain
Data Retention
- 6 months rolling window
- 1-hour bucket granularity
- No raw export, dashboard only