Hi all,
Yes, agree with jfb and QED.
Not beeing a network specialist:
Yes your isp sees (dns) traffic to cloudflare, but: are you sure the isp is able to see what domain you are requesting? As this should be encrypted..
Most isp is logging dns requests on their own dns servers to have some tracking records.
At least this logging is gone now. Enhanching a little more privacy
For the other part: without a vpn or something: yes: your isp knows what you are doing.
At least the ipadresses you are visiting.
If you want nothing of this to be seen by your isp, only option is a VPN based solution or Tor.
As Tor is already infiltrated with bad "gateway" / exit nodes from most of the 3 letter known agencys, I would not trust the total anonymaty from Tor, unless you know what exit node can be trusted...
Do you know really...?
Leaves VPN....Can anyone really tell what VPN is not under some control of gouvernement 3 letter agencies?
So who to trust 
?
The days of total anonymity are something from the past.
Beeing a good citizen: that is something positive as long as you live in a western country.
With current threaths. I think it is good we are under some kind of control.
How else can we keep our family and childrens safe?