The date for when the NumberOfVisitsCriterion cookie should be expired is set in the Episerver assemblies.
Some options around it:
1. Create a duplicate of the Number of Visits visitor group (inherits NumberOfVisitsCriterion) which drops the cookie. Ensure this sets an appropriate expiry date.
3. If none of the above works we may need to work with Cloud Flare.