Privacy notice

What the widget processes

When a widget runs on a website, the browser requests a puzzle from this server.
The request carries the IP address (technically unavoidable), the sitekey and the browser headers.
The server stores only a salted hash of the address for rate limiting, the puzzle id, its difficulty and time stamps.
The row is deleted shortly after the puzzle expires.
No cookies are set and no identifier is stored in the browser.

Customer accounts

For an account we store name, e-mail address, company (optional), password hash, language, time stamps and the sitekeys and API keys you create.
A session cookie is strictly necessary for the signed-in customer area.

Contact form

Name, e-mail address, subject and message are sent to us by e-mail and used to answer the request.

Legal basis: Art. 6 (1) b and f GDPR.
Hosting in Frankfurt, Germany.