Privacy

CDPCaptcha and the GDPR

The widget sets no cookies and does not build a profile of the visitor.
This page is technical background, not legal advice.

Data

What the hosted check stores.

The privacy notice is the formal text.
What is the GDPR? explains the regulation.

The widget does not set a cookie and does not store an identifier in the browser.

Rate limiting keeps a salted hash of the address, together with the puzzle id, difficulty, and timestamps.

The puzzle row is deleted shortly after the puzzle expires.
Hosting for the service is in Frankfurt, Germany.

Self-hosting keeps the same design on a server you operate.