What Mario approved
Mario approved a private administration area for entering website addresses, reviewing the list and approving or rejecting entries. He explicitly agreed to activate Cloudflare Zero Trust Free, including its terms and additional saved-card authorisation for usage beyond free limits. The activation screen confirmed a zero-dollar monthly plan with up to 50 users; this project admits only Mario.
What is deployed
The review desk is deployed separately from public search. Cloudflare Access checks Mario’s email through a one-time login code. The application also verifies the signed Access token. The original mario-obst.fyi pilot appears as an already-indexed reference. Additional addresses start pending; approval records a decision only. Automatic crawling and indexing are not connected.
A bounded collection
The administration accepts up to 100 website records and one entry per hostname. The optional internal-page setting records a maximum of ten pages and depth two for future crawling. It does not fetch those pages now. Public submissions remain closed, the existing 500 daily and 15,000 monthly search limits remain in place, and IndexNow remains deferred.
Privacy includes the administrator
The public search still needs no visitor account. The private desk needs administrator authentication and necessary Access cookies. Cloudflare processes authentication and connection information; disabling Workers logs does not remove that provider processing. The search privacy notice now explains this distinction. Website records hold addresses, crawl scope, current decisions and timestamps.
Checks and the next step
Local tests cover signed-token verification, unauthorised access, duplicate addresses, concurrent decisions and the 100-record cap. The live administration address redirects unsigned visitors to Access. Workers application logs and traces are disabled, as are alternate workers.dev addresses. Mario reported a dark page after the first sign-in. We corrected a runtime-incompatible redirect setting in the additional token check. After reloading, Mario confirmed that the live review desk and website list were visible. Adding addresses and changing decisions have passed local SQLite tests; a complete live decision cycle has not yet been checked. All Cloudflare changes for this release were made in the integrated browser.