This fingerprinting technique gathers general data about the machines reaching Cloudflare. For example, Cloudflare might learn that a particular user is accessing Cloudflare via Google Chrome on a MacBook Pro. Because there are millions of people using Google Chrome on a MacBook Pro, we cannot identify specific individuals.
Enable Picasso fingerprinting
- Bot Management subscription
- Written consent to Cloudflare Support to enable Picasso (if you enabled Bot Management before June, 2020)
- If you have a Content Security Policy (CSP), ensure it does not block scripts served from /cdn-cgi/bm/ or requests made to /cdn-cgi/bm/results. Your CSP should allow scripts served from your origin domain (script-src self), but not use nonces.