F5 Distributed Cloud Client-Side Defense Privacy Statement

Created: 29 March 2022
Last updated: 1 January 2026
Last reviewed: 1 January 2026

Overview

F5 Distributed Cloud Client-Side Defense (the “Service”) uses JavaScript to monitor a customer’s web pages for suspicious code, sending telemetry to the F5 Distributed Cloud Client-Side Defense Analysis Service, which generates actionable alerts viewable in a dashboard with one-click mitigation. When a customer enables mitigation, the Service’s JavaScript blocks network calls from the browser that attackers use to exfiltrate data. This Privacy Statement applies to the customer data that F5 processes through the Service.

Roles of the Parties

Under the data protection laws of the EU and similar jurisdictions, F5 is a processor of the customer data, and the customer is, or acts on behalf of, a controller of such data, to the extent it contains personal data.

Personal Data Processed by the Service

The Service processes data from the browsers and devices of users of the customer’s online properties. The Service uses automated means to collect this data.

The Service processes the following data:

• IP addresses are read and stored by the Service.
• Information about which assets, e.g., JavaScript assets, are accessing various page elements or data structures.
• Information about which assets request or send data to which endpoints.

The Service uses the data to determine if data or content presented in a webpage or entered by a user is being exfiltrated to an unauthorized destination.

More Information

To exercise your rights with respect to the customer data that F5 processes when providing the Service to a customer, please contact that customer. For more information about F5’s privacy practices, please see the F5 Privacy Notice.