PricingLog in

Does Cloudflare Images keep or strip Content Credentials?

Documented: Cloudflare Images can preserve Content Credentials when an account-wide setting is on, and discards existing Content Credentials when the setting is off for remote-image transformations.

Covers: Hosted images (imagedelivery.net and custom domains) · Remote-image transformations

Content Credentials (C2PA): what the source says

Hosted images: preserved when enabled

Documented: keeps

Cloudflare developer documentation, page updated 28 July 2026. It describes an opt-in, account-wide setting.

“Content Credentials preservation is an account-wide setting that applies to every image delivered from imagedelivery.net (and any custom domains configured for your Images account).”

Remote-image transformations: discarded when disabled

Documented: removal

Cloudflare developer documentation, page updated 26 May 2026. The setting is per zone.

“When this setting is disabled, any existing Content Credentials will always be discarded.”

What is and is not documented

  • Preservation is opt-in. With the default metadata=copyright variant, the EXIF copyright tag and all Content Credentials are kept and other metadata is discarded, according to the hosted-images page.
  • When the setting is on, Cloudflare says it keeps existing credentials and appends signed actions.
  • Behaviour depends on each transformation’s metadata parameter.

Check a file yourself

The Content Credentials checker reads the C2PA data in an image in your browser and shows who signed it, the generating tool and whether the signature still matches. It reads what a file declares; it does not detect AI from pixels, and a file with no credentials proves nothing either way. See why metadata gets stripped.

Questions

Does Cloudflare Images keep or strip Content Credentials?
Documented: Cloudflare Images can preserve Content Credentials when an account-wide setting is on, and discards existing Content Credentials when the setting is off for remote-image transformations.
Does Cloudflare Images read Content Credentials to label content?
We did not find that stated in the sources we read.
What is not documented about Cloudflare Images?
Preservation is opt-in. With the default metadata=copyright variant, the EXIF copyright tag and all Content Credentials are kept and other metadata is discarded, according to the hosted-images page. When the setting is on, Cloudflare says it keeps existing credentials and appends signed actions. Behaviour depends on each transformation’s metadata parameter.

This page reports what the cited sources say on the date shown. It is not an assessment of anyone’s product, it is not legal advice, and Proofcan does not guarantee compliance. Spotted something out of date? Write to support@proofcan.com.

Sources

Page reviewed . Proofcan is a technical tool, not legal advice, and does not guarantee compliance.