How clx works
clx puts one worker into your Cloudflare account. It counts visits and serves short links on your own domains, keeps the details in your D1 database and sends clx.cx only the totals.
- 1Connect Cloudflare
- 2Add a site or a link host
- 3Read the report
A visitor
opens a page of your site or a short link on your domain
clx-edge, in your account
counts the view or redirects the click, writes the details to your D1
clx.cx
gets the totals every hour and reads your D1 when you open a report
A token with only the rights it needs
You make a one-day bootstrap token from a template link. clx turns it into a working token for that one account, valid for a year, and deletes the bootstrap token — or tells you to revoke it, if Cloudflare would not let it. The working token is stored encrypted and holds only these rights:
- Workers scripts and routes: install the worker and its routes
- D1: the worker’s database
- Zone read: which domains you can pick
- Account settings and analytics read: the account’s name, and a warning before a quota runs out
What clx creates, and only that
One worker and one database, both named clx-edge, and a route for each site and for your link host. clx records what it made. If a clx-edge it did not make is already there, it stops and touches nothing; before replacing or removing the worker, it checks that the code there is one it released.
Where your data lives
The details — pages, sources, countries, devices, browsers, systems — stay in the D1 database in your account: by hour for 31 days, by day for 400. clx.cx keeps your settings and the totals. A visitor is counted by a hash of a daily salt; the hash and the salt are deleted when the day closes and never leave your account.
Updates, and how to leave
clx updates the worker with one checked release for every account, migrating its database first. Disconnecting removes the worker, the database and the routes and lists anything it could not; the working token you revoke in Cloudflare from the link clx gives, and the totals on clx.cx are deleted after 30 days, or at once. Revoking the token alone stops clx from changing anything; deleting clx-edge yourself stops the counting and the links at once.