AliExpress has written down where a proxy stops. Its terms of use forbid the systematic retrieval of site content into a database, "whether through robots, spiders, automatic devices or manual processes", without written permission. They also let AliExpress act on bot-like activity, on several associated accounts and on the abuse of coupons. Is AliExpress behind Cloudflare? When our server opened it on October 14, 2026, every reply named its server Tengine, and none carried a Cloudflare header.
We read AliExpress's terms of use, membership agreement, privacy policy, cookie notice and affiliate agreement on October 14, 2026, as text from our server. We also recorded what AliExpress answered that server. This page shows what the texts say, what AliExpress decided from our address, and the routes to its data that AliExpress itself offers. It shows no way past AliExpress's checks.
What AliExpress's terms say
AliExpress launched in 2010 and runs in 16 languages, by Alibaba Group's own description. Its Terms of Use were updated on August 26, 2026, and that version took effect on September 26, 2026. Clause 3.2 is the one that matters for scraping: "Systematic retrieval of Site Content from the Sites to create or compile, directly or indirectly, a collection, compilation, database or directory (whether through robots, spiders, automatic devices or manual processes) without written permission from AliExpress.com is prohibited".
The same clause makes one exception. Researchers who meet the conditions of Article 40(12) of the EU Digital Services Act may access publicly accessible data, for research on systemic risks in the EU.
Clause 6.3 lists what AliExpress treats as a breach. One ground is "any automated or bot-like activities, purchasing patterns that are inconsistent with ordinary consumers, fraudulent transactions, improper arbitrage". Another is "the use of multiple associated accounts to circumvent AliExpress.com rules or policies". When AliExpress acts, it may suspend or close an account "and any and all accounts determined to be related to such account". Members also agree "not abuse or attempt to abuse any promotions, coupons, discounts, or other benefits", and AliExpress may cancel orders and withdraw promotional offers.
Accounts are personal. "A set of Member ID and password is unique to a single account", and the membership agreement adds that no member may let another person use it, "even to other individuals within the Member's own business entity". The terms also shut out anyone not permitted to use the service under the laws of the country where they live or from which they reach it.
AliExpress's terms on the questions proxy users ask
| Question | What the terms say |
|---|---|
| Copying the catalog | forbidden without written permission, by robots or by hand |
| Research | allowed for EU researchers under the Digital Services Act |
| Bots and odd buying | grounds for action, with improper arbitrage |
| Several accounts | a breach when used to get around the rules; related accounts can be closed |
| Coupons and new-user deals | no abuse; orders and offers can be canceled |
| Sharing an account | not allowed, even inside your own business |
| Where you live | the service follows the laws of your country |
AliExpress Terms of Use, clauses 3.2, 4.3, 5.6 and 6.2 to 6.3, and the Free Membership Agreement, read October 14, 2026
What AliExpress decided from our address
On October 14, 2026, our server in the US asked AliExpress for two things: its robots.txt file and its home page. Every reply named its server Tengine. The robots.txt reply also carried forwarding headers from the Akamai network, and no reply carried a Cloudflare header.
The address decided the rest before any page loaded. The home page sent our server to AliExpress's US site, www.aliexpress.us, with "gatewayAdapt=glo2usa" and a ship-to of US in the address. The robots.txt reply also set a cookie, aep_usuc_f, to "site=usa&c_tp=USD®ion=US". AliExpress's cookie notice lists that cookie among the ones it calls strictly necessary, next to a security cookie named baxia_sec_cookie.
The privacy policy says what AliExpress gathers on its own. The list includes "IP addresses", device data and "broad geographic location (e.g., country or city-level location)". It uses such data for "Assessing and monitoring account security and transaction risks", with outside risk control providers. The membership agreement even ties one account feature to the address: a member who registers from an IP address in mainland China also gets an Alipay username. A proxy changes the address that AliExpress sees, and the terms above apply all the same.
Our US server
asks for www.aliexpress.com
Tengine answers
Akamai headers, no Cloudflare
Sent to aliexpress.us
ship-to US in the address
Region cookie set
region US, US dollars
AliExpress's robots.txt, read the same minute, keeps every crawler out of its search, API, product detail, wishlist and cart paths. It lets them read the wholesale pages and the reviews API.
The routes AliExpress offers to its data
AliExpress runs an affiliate program, AliExpress Portals. Its affiliate agreement makes AliExpress content available through the affiliate's Portals account or "through authorized use of designated APIs of AliExpress Portals". AliExpress can suspend that API. The agreement also counts as fraud any use of "robots, frames, iframes, scripts, or manually “refreshing” of pages, for the sole purpose of creating commissions".
AliExpress also runs an Open Platform for developers. Its pages are built by script, so we could not read its own terms as text. For research on systemic risks in the EU, the terms' exception under the Digital Services Act is the route.
What people search about AliExpress
Keyword Planner counted 27,100 searches a month worldwide for "aliexpress affiliate program" on October 14, 2026. That is nearly 200 times the 140 for "aliexpress proxy". "aliexpress portals" drew 18,100 and "aliexpress api" 1,600. The deal questions follow: "aliexpress welcome deal" drew 1,600 and "aliexpress new user coupon" 880. "aliexpress scraper" drew 210, and its last three months drew 44% fewer searches than the three before them. "aliexpress captcha" drew 140, and Keyword Planner gives no figure for "aliexpress vpn" or "aliexpress cloudflare". In Search Console this page had 50 impressions and no clicks in 120 days.
What scraping and proxy sellers' pages promise
We read five such pages on October 14, 2026. Webshare's page of September 2026 says "There might be some pricing differences or your access might be limited when shopping". A proxy, it says, "will help you overcome any regional limitation". AliExpress's terms tie the service to the laws of where you live, let AliExpress stop a product's sale in markets where it is not permitted, and list improper arbitrage among the grounds for action.
Crawlbase titles its guide "rotating, unblocked, public data only". It is the one of the five that mentions AliExpress's terms: it says they "restrict automated access", and it still sells rotating addresses to scrape AliExpress unblocked. Scrapfly asks "Is web scraping aliexpress.com legal?" and answers "Yes. Aliexpress product data is publicly available". Its answer leaves out the terms, which make no exception for public data outside EU research. Oxylabs teaches readers to "scrape AliExpress product data on a large scale without blocks". ScrapingBee compares "APIs, no-code tools, and anti-bot solutions". None of the five mentions AliExpress's affiliate APIs.
Where a proxy fits
HProxy sells nothing for scraping AliExpress or for getting past its checks. A proxy fits two narrow jobs here. A seller or brand can check by hand how its own listings and ads look in another market. Anyone can protect a session on public Wi-Fi. Our residential lines target 200+ countries from $0.44 per GB, and Premium adds city and ISP targeting from $1.00 per GB. The free proxy checker shows which country an address reports, and how to check a proxy walks through the rest. For a signed-in shopping account, free proxies are the wrong tool, for the reasons in are free proxies safe. For the wider Alibaba family, see proxies for Alibaba, and for the basics, what a residential proxy is.
What this page does not cover
- How AliExpress's checks decide. AliExpress does not publish it.
- AliExpress's help center and Open Platform terms. Both are built by script, so we could not read them as text.
- Prices by country. We read nothing behind the region redirect.
- Any AliExpress page through a proxy. We used none.
The Cloudflare finding rests on a few replies to one server on one day. We will read these texts again by January 14, 2027.
Sources
Every source below was read on October 14, 2026, as text from our server, unless a date says otherwise.
- AliExpress, Terms of Use, updated August 26, 2026, in force since September 26, 2026.
- AliExpress, Free Membership Agreement, same dates.
- AliExpress, Privacy Policy, in force since July 30, 2026.
- AliExpress, Cookie Notice, in force since May 16, 2024.
- AliExpress, Affiliate Program Service Agreement, version of March 31, 2022.
- AliExpress, robots.txt and the replies of www.aliexpress.com to our server.
- Alibaba Group, its businesses in its own words, on AliExpress, July 10, 2024, (read October 13, 2026).
- Webshare, Crawlbase, Scrapfly, Oxylabs and ScrapingBee, their AliExpress pages (not linked).
- Google Keyword Planner, worldwide monthly averages for 40 phrases around AliExpress, and Google Search Console for this page.
