The terms, in plain English.

Who provides Controlflare

Controlflare is operated by a sole trader in Norway. In these terms "Controlflare", "we" and "us" mean that operator, and "you" means the person or organisation signing in.

There is no support inbox. Questions, complaints and requests go through the whirlwin.io Discord, which is also what the Support page in the dashboard points to. Please do not paste secrets (API tokens, pairing secrets, cookies) into a public channel.

What the service does, and does not do

Controlflare estimates what your Cloudflare Workers are costing you this month and, when the estimate crosses a cap you set, pauses your Workers. You can also pause and resume Workers yourself from the dashboard.

The numbers are estimates. They are computed from Cloudflare usage analytics and published list prices, on a schedule you choose per account (every 5, 10 or 15 minutes). Your Cloudflare invoice is the only authoritative number, and it can differ from the estimate.

A pause does not stop every charge. Stored data, Durable Object alarms, Workers that are not paused, products Controlflare does not touch and Workers invoked other than through a route can all keep costing money. The disclaimer has the exact list, and it forms part of these terms.

Your account and your Cloudflare account

You sign in with your Cloudflare account. You are responsible for keeping that sign-in secure and for everything done under it.

Controlflare reaches your Cloudflare account only through the open-source cost agent, which you deploy into your own account. You set the Cloudflare API token on that agent yourself; it is never sent to Controlflare, and we never see it. Controlflare holds only the agent's address and a pairing secret.

You remain responsible for your Cloudflare account, for the charges it incurs, for the cost agent you deploy into it, for the API token you set on that agent and the permissions you give it, and for keeping the agent deployed and working. If the agent is missing or broken, your cap is not enforced.

Pausing production

By setting a cap and turning enforcement on, you instruct Controlflare to pause your Workers when estimated spend crosses that cap. A paused Worker stops receiving traffic, which interrupts whatever it serves, including production traffic. You accept that this is the intended outcome.

Controlflare never resumes anything on its own. You can resume a single Worker, or every Worker on an account, from the dashboard at any time.

Pausing, resuming and the cap itself keep working whether or not you are subscribed. If your trial ends or your subscription lapses, your existing cap goes on being enforced and you can still pause and resume. What locks is configuration: adding an account, changing a cap or enforcement settings, and connecting or disconnecting a cost agent. That means a lapsed customer cannot switch enforcement off from settings. To stop Controlflare acting on an account at any time, subscribed or not, delete the account from the dashboard or remove the cost agent from your Cloudflare account.

Price, trial and billing

• Trial. The first 30 days from sign-up are free, and no card is needed.
• Price. After the trial, Controlflare is $1 a month per user (per Controlflare sign-in), covering every Cloudflare account that user connects. It is billed in US dollars.
• Stripe is the seller of record. Payments are taken by Stripe, which acts as merchant of record and reseller. Stripe's own terms apply to the payment, and Stripe adds and collects any VAT or sales tax on top of the price where it applies. Card details go to Stripe and never reach Controlflare.
• When you are charged. If you subscribe during the trial, the first charge normally falls when your 30 free days end. If you subscribe in the last two days of the trial, or after it, you may be charged straight away.
• Renewal and cancellation. The subscription renews every month until you cancel. You can cancel at any time from the Plan page in the dashboard (Manage billing opens the Stripe customer portal). Cancellation takes effect at the end of the period you have already paid for.
• Refunds. There are no refunds for part of a month, except where the law requires one.
• Price changes. We will tell you by email at least 30 days before a price change takes effect. You can cancel before it does.

Limitation of liability

To the maximum extent permitted by law:

• Controlflare is not liable for any indirect or consequential loss, lost revenue, lost profit or lost data, however it arises.
• Controlflare is not liable for any charge Cloudflare makes to you, whether or not a cap fired, fired late or fired when it should not have.
• Our total aggregate liability to you, for all claims arising out of or relating to Controlflare or these terms, is limited to the amount you paid Controlflare in the 12 months before the claim. If you have paid nothing, for example during the free trial, that amount is zero.

Nothing in these terms limits or excludes liability that cannot be limited or excluded by law, such as liability for gross negligence or wilful misconduct under Norwegian law, or your mandatory rights as a consumer.

Controlflare is provided as is, without warranty of any kind. The disclaimer sets that out in full, and it applies to these terms.

Acceptable use

You agree not to:

• use Controlflare on a Cloudflare account you are not authorised to manage;
• abuse the API or the remote MCP server, for example by flooding it with requests, probing it for weaknesses, or trying to reach another customer's data;
• reverse-engineer, copy or resell the hosted service. The cost agent is open source under the MIT licence, and nothing here limits what that licence lets you do with the agent's code.

Suspension and termination

You can stop using Controlflare at any time: cancel the subscription and delete your accounts, as described below.

We may suspend or close your access if you break these terms, with notice where that is practical. Not paying is not a reason we suspend enforcement: see "Pausing production" above. If we ever stop offering Controlflare, we will give you at least 30 days' notice.

Your data when you leave

• Deleting an account in the dashboard is always available, subscribed or not. It removes that Cloudflare account's record from Controlflare, together with its Workers list, spend history and activity log.
• Resume before you delete. Deleting an account does not resume Workers that are paused, and it removes the saved state a resume would restore. Resume first if you want your Workers back as they were.
• The cost agent stays in your Cloudflare account, along with the API token you set on it. Remove them yourself in Cloudflare.
• Cancelling the subscription deletes nothing. Your accounts and caps stay in place, and caps keep being enforced, until you delete the account or remove the agent.
• Your sign-in record (your user and the email address Cloudflare gave us) is not removed by deleting accounts. Ask through the support channel above and we will delete it.
• Controlflare's internal error log can refer to a deleted account by its internal id for up to 14 days, after which it is pruned. Stripe keeps its own billing records under its own terms.

Changes to these terms

We may change these terms. We will post the new version on this page with a new date, and for a change that matters to you we will also tell you by email before it takes effect. If you keep using Controlflare after a change takes effect, the new terms apply; if you do not agree with them, cancel and delete your accounts.

Governing law

These terms are governed by Norwegian law, and the courts of Norway, with Oslo tingrett as the agreed venue, decide any dispute. If you are a consumer, this does not take away the protection of mandatory consumer law in the country where you live, or your right to bring a claim there.

Not affiliated with Cloudflare

Controlflare is an independent tool. It is not affiliated with, endorsed by, sponsored by or supported by Cloudflare, Inc. Cloudflare, Workers, D1, R2 and Durable Objects are trademarks of Cloudflare, Inc.

Last updated 12 October 2026.