Privacy

reCAPTCHA and the GDPR

Reviewing reCAPTCHA under the GDPR is a legal question for your counsel, not a slogan.
This page only contrasts the technical setup.

Setup

What differs in the request path.

See also CDPCaptcha and the GDPR and What is the GDPR?.

Third party

A reCAPTCHA script is loaded from Google.
That is a separate operator on the page.

Cookies and signals

Teams examine whether that script sets cookies or sends device details.
CDPCaptcha sets no cookie and does not call a third party.

Hosting

The CDPCaptcha service is hosted in Frankfurt, Germany.
A salted address hash is kept only for rate limiting and then deleted.

Compare on a page you control

Add CDPCaptcha beside your current form and read the privacy notice before you switch.

Sign up free