Help with removing __cf_bm

[vast root]

Hey everyone, I'm trying to get rid of all cookies on my websites. The only cookie I see left is __cf_bm. I read the docs and it says I should be able to disable it via the page https://developers.cloudflare.com/api/operations/bot-management-for-a-zone-update-config however I see no option to do so. I'm on the free plan, I have no bots enabled yet I still see the cookie. My API request is below:

curl --request PUT
--url "https://api.cloudflare.com/client/v4/zones/ZONE_ID/bot_management"
--header 'Authorization: Bearer ID'
--header 'Content-Type: application/json'
--data '{"__cf_bm": false}'

[dusky karma]

What response do you get back when you send that API call?

[mortal sinew]

Why would you even want to do this?

[vast root]

This is the response with my API call:

  "result": {
    "enable_js": false,
    "fight_mode": false,
    "using_latest_model": true
  },
  "success": true,
  "errors": [],
  "messages": []```

I still see the cookie afterwards though.

[vast root]

We are updating a privacy policy and want to claim that we don't store any cookies on users. However, we can't claim that without this cookie being gone.

[dusky karma]

I see, I think that the next step here would be to open a support ticket. Do you have a paid plan level?

[vast root]

Yes, I have the pro plan. I've opened a ticket before writing here. Just wanted to see if anyone had done this before. Hopefully I don't have to upgrade to enterprise to get rid of a simple cookie. lol

[dusky karma]

I don't think so, even on free plan I would have found a way to get a ticket raised.
Could you share the ticket number?

[vast root]

#3140493

[dusky karma]

Thanks I'll have a look into this

[dusky karma]

Could you try this api call with --data '{"suppress_session_score": true}' ?

Actually, I think there is also something else at play that I can't discuss here as it relates to account configuration, let me follow up on the ticket with both of these

[vast root]

  "result": null,
  "success": false,
  "errors": [
    {
      "code": 10400,
      "message": "Bad Request"
    }
  ],
  "messages": [
    {
      "code": 10400,
      "message": "zone not entitled to enable: suppress_session_score"
    }
  ]
}```

[dusky karma]

Okay no problem

[vast root]

Oh sure thing!

[dusky karma]

I'll follow up on the ticket

[vast root]

Thank you