Skip to main content
Free trial
Login
CCPA / CPRA

Bot protection that respects the CCPA

CaptchaFox never sells or shares personal information – so protecting your forms doesn't complicate your California privacy obligations.

  • No sale or sharing of data
  • Service-provider role
  • Minimal data footprint

No sale, no sharing

Visitor data is used for exactly one thing: deciding whether a request is human. It is never sold, shared or monetized.

Service-provider role

CaptchaFox processes personal information only on your documented instructions – the relationship the CCPA expects from a service provider.

Minimal data footprint

The IP address, plus other technical and usage signals needed for bot detection. Nothing beyond that is collected, and identifying data is anonymized right away.

CCPA compliance checklist

How CaptchaFox lines up with the California Consumer Privacy Act, as amended by the CPRA.

  • No sale or sharing of personal information

    Cal. Civ. Code § 1798.140

    CaptchaFox does not sell personal information and does not share it for cross-context behavioral advertising – so the widget does not affect your 'Do Not Sell or Share' obligations.

  • Service-provider relationship

    Cal. Civ. Code § 1798.140(ag)

    We process visitor data solely to provide bot protection to you, under a written agreement that restricts any other use.

  • Collection limited to what is necessary

    Cal. Civ. Code § 1798.100(c)

    Only the signals needed to distinguish humans from bots are processed, matching the CPRA's data minimization principle.

  • Consumer rights supported

    Cal. Civ. Code § 1798.105

    Identifying data is anonymized as early as possible and personal information is not kept beyond what verification requires – and we support you in answering deletion and access requests.

  • No profiling or behavioral advertising

    Cal. Civ. Code § 1798.140

    CaptchaFox builds no advertising profiles and attaches no advertising identifiers to visitors – ever.

Frequently asked questions

Everything you need to know. Can't find your answer? Contact our support team.

Does CaptchaFox sell personal information?
No. Visitor data is processed only to distinguish humans from bots and is never sold, shared or used for advertising. Using CaptchaFox does not change your 'Do Not Sell or Share My Personal Information' status.
Is CaptchaFox a service provider under the CCPA?
Yes. CaptchaFox processes personal information solely on your behalf and instructions under a written agreement, matching the CCPA's definition of a service provider.
How does CaptchaFox handle consumer deletion requests?
Identifying data is anonymized as early as possible and personal information is not kept beyond the verification, so there is usually nothing identifiable left to delete. Where personal data exists, we support you in fulfilling consumer requests.
Do I need to mention CaptchaFox in my privacy notice?
Yes, as with any service provider: name CaptchaFox as your bot-protection provider, describe the categories of data processed (the IP address and other technical signals used for bot detection) and the security purpose of the processing.

More privacy regulations

Privacy CenterGDPRUK GDPRSwiss nFADPLGPDDPDPAPDPAPIPLAPPIPrivacy Act (AU)

Fight bots and protect your users' data.

Don't give fraudsters and spammers a chance and protect your website with CaptchaFox today.

CaptchaFox protecting websites on desktop and mobile devices