Cloudflare injects a beacon. My CSP said no.

A CSP error in production, from a script I never added. The usual fix is to allow the host — which would have made my privacy policy false.