Cloudflare says it has removed social sign-up in South Korea
Cloudflare says Google, Apple and GitHub sign-up bypasses its consent checks, so users in South Korea must create accounts through its own form.
Cloudflare says Google, Apple and GitHub sign-up bypasses its consent checks, so users in South Korea must create accounts through its own form.

Cloudflare says it has removed Google, Apple and GitHub sign-up in South Korea because those routes skip the form where it collects required consent. In an October 22, 2026 blog post, the company says every account created there must instead pass through its own sign-up form.
Cloudflare says it offers those external sign-up options globally. In most countries, its own form uses a single statement agreeing to its terms, privacy policy and cookie policy. The South Korean form separates consent into four items, distinguishing what users must accept from optional marketing permission.
| Consent item | Status |
|---|---|
| Terms of service | Required |
| Collection and use of personal information | Required |
| Transfer of a limited amount of personal information overseas | Required |
| Sharing a limited amount of personal information with marketing third parties | Optional |
Each item links to its full text, and users can choose an option to agree to all four at once. Cloudflare says the sign-up button remains disabled until all three required items are checked. Leaving the marketing item unchecked opts the user out of marketing communications without blocking account creation.

The W27 keeps the Galaxy Z Fold 8 Ultra’s core hardware, with dark-red or dark-blue finishes, golden accents and 16GB of working memory in both storage versions.
2 min
The company says external sign-up routes send users to an identity provider—a service that verifies their identity—and return without displaying Cloudflare’s form. Cloudflare cannot change those providers’ screens. Rather than add a separate consent step after identity verification for South Korea, it chose to remove the routes that bypass its existing form.
Cloudflare says it estimates a user’s country from their internet protocol, or IP, address to choose the default form. The country the user selects during sign-up overrides that estimate and determines which sign-up experience applies from then on.
The company describes IP location as an estimate, not proof of residence. Addresses change ownership, and a South Korean resident traveling abroad, using a virtual private network or connecting through a mobile carrier’s shared-address system may not appear to have a South Korean address. Cloudflare says that is why the IP estimate should not be the only signal used to meet a local requirement.
Cloudflare disclosed the sign-up change alongside its announcement that it had obtained South Korea’s Information Security Management System, or ISMS, certification under the ISMS-P framework. The company describes ISMS as an assessment of security controls and personal-data flows against South Korean privacy law and regulatory requirements.
Cloudflare says auditors appointed by the Korea Internet & Security Agency spent ten days examining 80 controls, including the wording and presentation of consent requests. It says certification requires an independent audit followed by a special committee’s review. The certification lasts three years, with annual audits required to maintain it.

The satellite operator expects access to more than twice OneWeb’s current bandwidth in return for spending in 2027–2034, with initial IRIS² services expected from 2030.
3 min

The black, gold and green edition follows September’s sold-out preorders. Nintendo’s replenished launch-day stock also quickly sold out.
1 min