Privacy Policy

Last updated: July 18, 2026

1. Overview

CaptchaTool is designed with privacy as a core principle. We do not use cookies for tracking, do not fingerprint users, and do not build behavioral profiles. This policy explains what data we collect and why.

2. Data We Collect

Account Data

When you register, we collect your name, email address, and password. Your password is stored securely and is never visible to our team. This data is used for authentication and account management.

Site Data

We store the domains you register, site keys, and domain verification status. This data is necessary to operate the Service.

CAPTCHA Verification Data

When an end user completes a CAPTCHA challenge, we log:

  • The requesting IP address (for rate limiting and abuse prevention)
  • The site key used
  • The challenge outcome (pass/fail)
  • A timestamp

We do not collect browser fingerprints, cookies, mouse movements, keystrokes, or any behavioral data from end users.

Billing Data

Payment processing is handled by Stripe. We do not store credit card numbers. We store your Stripe customer ID and subscription status.

3. How We Use Data

  • To authenticate you and manage your account
  • To generate and validate CAPTCHA challenges
  • To enforce rate limits and prevent abuse
  • To process billing and subscriptions
  • To provide telemetry and usage statistics in your dashboard
  • To send transactional emails (sign-in links, account notifications)

4. Data Retention

Account data is retained while your account is active. CAPTCHA verification records — including the requesting IP address — are automatically deleted within 24 hours of a challenge expiring. Audit logs used for abuse prevention are retained for up to 30 days and then permanently deleted. You may request deletion of your account and associated data at any time.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

  • Stripe — for payment processing
  • Sentry — for error tracking (no personal data is sent)
  • Law enforcement — if required by valid legal process

6. Cookies

CaptchaTool uses only essential session cookies required for authentication on the dashboard. The CAPTCHA widget itself uses zero cookies. We do not use analytics cookies, advertising cookies, or any third-party tracking.

7. Security

We implement industry-standard security practices to protect your data, including encryption in transit, secure credential storage, and rate limiting. We regularly review our security posture.

8. Your Rights

You may:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Export your data

To exercise these rights, contact us at [email protected].

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions, contact us at [email protected].