I learned a few things from this post. Is the IP truncation happening at a certain octet? I’d be interested to read more of that. I’m searching on mobile, so hard to find (I hit a 404 and some forum posts)
>US for profit company
>privacy
That's a literal oxymoron. All US companies are subject to data snooping whatever they say themselves is irrelevant. Lavabit is the prime example how the US gov will force you to either hand over keys or go out of business. And since Cloudflare didn't have any problems with Gov yet it's obvious they are handing over all keys without court orders.