F5 Distributed Cloud Bot Defense Privacy Statement

Created: 1 July 2020
Last updated: 1 January 2026
Last reviewed: 1 January 2026

Overview

F5 Distributed Cloud Bot Defense (Managed Service) (the "Service") assesses the security/fraud risk of interactions with F5 customers’ online properties. The Service can be configured to block or simply flag suspected security/fraud risks. This Privacy Statement applies to the customer data that F5 processes through the Service.

Roles of the Parties

Under the data protection laws of the EU and similar jurisdictions, F5 is a processor of the customer data, and the customer is, or acts on behalf of, a controller of such data, to the extent it contains personal data.

Personal Data Processed by the Service

The Service is available in several deployment models and numerous data configurations. Generally, however, the Service processes data from the browsers and devices of users of the customer’s online properties:

• Current IP address and pseudorandomly generated UUID of the device that is using the customer’s online property.
• Information from interactions between the user (and their browser or device) and the online property; and
• Other technical data about the browser or device that may be used to screen for malicious activity.

The Service uses the data to determine whether an interaction with the customer’s online property is from an unauthorized bot or otherwise poses a security risk. If the Service determines that it is, the Service either blocks or flags the traffic and creates a log of this event for that customer’s later review. Otherwise, the Service permits the interaction to continue.

More Information

If you believe that the Service has improperly blocked or restricted your access to a customer’s online property, please contact that customer to request restoration of your access.

To exercise your rights with respect to the customer data that F5 processes when providing the Service to a customer, please contact that customer. For more information about F5’s privacy practices, please see the F5 Privacy Notice.