The change

Cloudflare runs one of the largest networks on the internet and also sells domain names through Cloudflare Registrar. On November 9, 2026, it published a new version of its Domain Registration Agreement, the contract that covers the domains you register and renew through Cloudflare. The version it replaces was effective August 20, 2026.

Most of the changes are small. Five of them change what you agree to.

What changed

• The early charge is now in the contract. Auto-renewals are charged about 30 days before the renewal date.

• The superadministrator can act for the owner. The top role in your Cloudflare account now has written authority over the domain, including ownership transfers.

• Proof that you can pay. Cloudflare can ask you to confirm in writing that you can cover your indemnity duties.

• The registry is protected too. The company that runs your domain ending is named as a party the agreement is meant to benefit.

• No liability for lost disputes. Cloudflare and the registry say they are not liable if you lose a domain dispute or cannot get the name you want.

The renewal charge

Cloudflare turns auto-renew on by default. Section 3.4 says “DOMAIN NAMES ARE ENROLLED IN AUTOMATIC RENEWAL UNLESS YOU DISABLE SUCH AUTOMATIC RENEWAL OR AUTOMATIC RENEWAL IS NOT AVAILABLE FOR YOUR PAYMENT METHOD”, and that has not changed. The August version said Cloudflare would renew the domain “WHEN IT COMES UP FOR RENEWAL” and take payment from the card on file. That sentence is still there.

Right after it, the November version adds: “TO MINIMIZE THE RISK THAT A PAYMENT FAILURE PREVENTS YOU FROM RENEWING YOUR DOMAIN REGISTRATION, CLOUDFLARE WILL AUTOMATICALLY CHARGE YOU FOR RENEWAL APPROXIMATELY 30 DAYS BEFORE YOUR DOMAIN’S RENEWAL DATE.” The capital letters are Cloudflare’s own, since the whole auto-renewal section is written that way.

What Cloudflare’s help pages already said

The timing itself is not new. Cloudflare’s page on renewing domains, last updated April 24, 2026, says: “The first auto-renew attempt will occur approximately 30 days prior to expiration.” It also says: “If you wish to disable auto-renew, do so at least 30 days prior to the expiration date.”

What changed is where the rule lives. A help page explains how a product works. The Domain Registration Agreement is the contract you accept, and since November 9 it states the 30-day charge itself.

No refunds after the charge

Section 3.1, which did not change, says: “All payment obligations are non-cancellable and non-revocable, and all amounts paid are non-refundable.” The help page says the same in plain words: “All renewals are final and Cloudflare will not issue refunds.”

Put together, the real deadline for dropping a domain is about a month before it expires, not the expiry date. If you decide two weeks before expiry that you no longer need a domain, the renewal has most likely been paid already, and the agreement does not give it back.

Section 4.2, also unchanged, promises email reminders “roughly one month and one week prior to” the expiration date. So the first reminder in the agreement comes at about the same time as the charge. The help page adds a monthly email to the domain’s Super Admin that lists domains set to renew within the next 45 days.

The superadministrator can now act for the owner

Section 1.5 is about who may act for the registrant, the person or company that owns the domain. The August version said: “The person named as administrative contact at the time the controlling account was secured shall be deemed a designee of the Registrant with the authority to manage the domain name.”

The November version says: “The persons named as administrative contact at the time the controlling account was secured and the superadministrator of the controlling account shall both be deemed designees of the Registrant with the authority to manage the domain name, including, but not limited to, with respect to transferring ownership or effecting a change of registrant.”

Super Administrator is the top role in a Cloudflare account. Cloudflare’s list of roles says it “Can edit any Cloudflare setting, make purchases, update billing, manage members, create account-owned API tokens, and manage all account-owned API tokens.” Its page on transferring domains out already warned: “Anyone with super-admin and admin permissions for a zone can also manage your domains.”

The new wording puts that power in the contract. Whoever holds the Super Administrator role, for example an agency or a contractor who set up the account, is someone the agreement treats as acting for your company, including for a change of owner.

Indemnity and domain disputes

Under Section 7 you already agreed to cover Cloudflare and the registry for claims tied to your domain, within 30 days of their demand. The November version adds: “You agree to provide written assurances, upon request, that you can satisfy and fulfil this obligation and your failure to provide such assurances shall constitute a material breach of this Agreement.”

A material breach matters because Section 4.3, unchanged, lets Cloudflare suspend the Registrar Services or end the agreement when one happens. Section 7 also now says: “You agree that the Registry Operator is an intended third-party beneficiary of this Agreement.” The registry operator is the company that runs a domain ending, and this sentence means the agreement is also written to protect it.

Section 9 now ends with a new line: “YOU AGREE THAT, TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER CLOUDFLARE NOR THE REGISTRY OPERATOR OF YOUR DOMAIN(S) SHALL HAVE ANY LIABILITY TO YOU RELATING TO OR ARISING FROM YOUR ABILITY OR INABILITY TO OBTAIN A DESIRED DOMAIN NAME OR THE RESULTS OF ANY DISPUTE RESOLUTION PROCEEDING REGARDING A DOMAIN NAME.” If you lose a domain in a dispute, for example a trademark complaint, the agreement says you cannot hold either of them responsible for that result.

When the new terms apply to you

Section 1.6 did not change. If a revision materially alters your rights, Cloudflare says it will use reasonable efforts to contact you, including by email. Then: “Unless otherwise specified, any modifications to this Agreement will take effect at the start of the renewal term following the notice.”

If you do not agree, the agreement gives you one option: “your sole and exclusive remedy will be to not renew the Registrar Services.”

What the early charge protects

The earlier charge has a real purpose. If a card fails, Cloudflare has time to try again before the domain expires. Its help page says “Several more attempts are made if the first attempt fails” and “The last attempt to renew is made on the day before expiration.” A domain with an expired card gets a month of retries instead of one try on the last day.

Why this matters

Renewal rules are where small costs and lost domains come from. GoDaddy’s refund policy now excludes most renewals, SolarWinds now wants 90 days’ notice to stop your auto-renewal, and Cloudflare itself removed its promise not to bill for bad bot requests in September.

A domain is also more than a line on an invoice. It carries your website and your email, so the people who can transfer it matter as much as the price. Clauses like these sit in contracts most teams accept once and never reopen, which is why it pays to monitor vendor terms of service after you sign.

Potential impact

If you keep domains at Cloudflare, check five things:

• Which domains do you plan to let go, and is today more than 30 days before their expiry date?

• Whose card is on file, and will a charge a month before expiry surprise your finance team?

• Who holds the Super Administrator role in your Cloudflare account, and should all of them still have it?

• Do the renewal reminders reach someone who reads them and can decide?

• Do you have an Enterprise agreement or order form that sets different payment terms?

How Venpo detected it

Venpo monitors Cloudflare’s legal pages and compared the November 9 version of the Domain Registration Agreement line by line with the August 20 version on record. The details are on the Cloudflare Domain Registration Agreement change page. Every quote in this article was checked against Cloudflare’s live agreement and help pages at the time of publication.

Business outcome

Teams that catch this move their deadline for dropping a domain a month earlier, clean up who holds the top role in their Cloudflare account, and avoid paying for a year they did not want. That is the practical case for vendor contract monitoring, and this comparison of manual and automated vendor monitoring shows why a yearly review misses changes like these.

Key takeaway

Since November 9, 2026, Cloudflare’s Domain Registration Agreement says auto-renewals are charged about 30 days before the renewal date, keeps every payment non-refundable, and gives the account’s superadministrator authority to transfer ownership of the domain.