Skip to main content
Free trial
Login
Privacy Act (AU)

Bot protection under the Australian Privacy Act

The Australian Privacy Principles ask for necessary-only collection, accountable overseas disclosure and real security. CaptchaFox's security-only data footprint checks all three.

  • Necessary-only collection
  • Accountable overseas disclosure
  • No direct marketing use

Necessary-only collection

Only the signals reasonably necessary for bot detection are collected – nothing for advertising, analytics or resale.

Accountable disclosure

Overseas processing runs under a written agreement that binds CaptchaFox to APP-comparable handling, with GDPR-level EU hosting behind it.

Security of personal information

Identifying data is anonymized as early as possible and never stored permanently in plain text.

Privacy Act compliance checklist

How CaptchaFox lines up with the Australian Privacy Principles (APPs).

  • Collection limited to what is necessary

    APP 3

    The widget collects only what is reasonably necessary to distinguish humans from bots – the IP address and other technical signals, never more than verification requires.

  • Cross-border disclosure with safeguards

    APP 8

    APP 8 makes you accountable for overseas recipients. Our written agreement binds CaptchaFox to comparable handling, and processing happens under the GDPR's protections in EU data centers.

  • Security of personal information

    APP 11

    Early anonymization, encryption in transit and EU data-center security protect the little data the widget touches.

  • No direct marketing use

    APP 7

    Visitor data is never used or disclosed for direct marketing – it exists only to produce a bot-or-human verdict.

  • Open and transparent management

    APP 1

    We document exactly what the widget processes so your privacy policy can describe the practice accurately.

Frequently asked questions

Everything you need to know. Can't find your answer? Contact our support team.

Is CaptchaFox compliant with the Australian Privacy Act?
Yes. CaptchaFox collects only what is reasonably necessary for bot detection, applies strong security measures, never uses data for marketing and operates under a written agreement that supports your APP 8 accountability for overseas disclosure.
Can Australian websites use an EU-hosted CAPTCHA?
Yes. APP 8 permits overseas disclosure where you take reasonable steps to ensure the recipient handles data consistently with the APPs – our written agreement provides that, backed by GDPR-level EU processing.
Does the widget collect more than it needs?
No. Collection is limited to the IP address and other technical signals needed for bot detection, and identifying data is anonymized as early as possible – the direct application of APP 3.
What should my privacy policy say?
Describe bot protection as a purpose, name CaptchaFox (Scoria Labs GmbH) as the overseas recipient (Germany/EU), list the data collected and link to the CaptchaFox end-user privacy policy.

More privacy regulations

Privacy CenterGDPRCCPA / CPRAUK GDPRSwiss nFADPLGPDDPDPAPDPAPIPLAPPI

Fight bots and protect your users' data.

Don't give fraudsters and spammers a chance and protect your website with CaptchaFox today.

CaptchaFox protecting websites on desktop and mobile devices