Skip to main content
Free trial
Login
LGPD

Bot protection aligned with Brazil's LGPD

The Lei Geral de Proteção de Dados mirrors the GDPR's principles – and CaptchaFox is built for exactly those: minimal data, a clear processing contract and no tracking.

  • No cookies or tracking
  • Legitimate-interest friendly
  • Processing contract included

No cookies, no consent friction

The widget stores nothing on the visitor's device and never builds profiles – verification stays invisible to your users.

Necessity by design

Only the IP address and other technical signals needed for verification are processed – in line with the minimum the LGPD's necessity principle asks for.

Clear operator role

You remain the controller (controlador); CaptchaFox processes data strictly on your instructions as operator (operador), under a written contract.

LGPD compliance checklist

How CaptchaFox lines up with Brazil's Lei Geral de Proteção de Dados.

  • Clear legal basis

    Art. 7 IX LGPDArt. 10 LGPD

    Bot protection typically rests on the controller's legitimate interest in the security of its services – one of the LGPD's recognized legal bases.

  • Necessity principle respected

    Art. 6 III LGPD

    Processing is limited to the minimum needed to tell humans and bots apart, and identifying data is anonymized as early as possible.

  • Operator under contract

    Art. 39 LGPD

    CaptchaFox processes personal data exclusively on your documented instructions, with a written processing agreement available on every plan.

  • International transfers with safeguards

    Art. 33 LGPD

    Data is processed in EU data centers – a jurisdiction with GDPR-level protection – and our processing agreement provides the contractual safeguards the LGPD expects for international transfers.

  • Data subject rights supported

    Art. 18 LGPD

    Because identifying data is anonymized without delay, there is usually nothing personal left to hand over – and where personal data exists, we support you in answering access and deletion requests.

Frequently asked questions

Everything you need to know. Can't find your answer? Contact our support team.

Is CaptchaFox LGPD compliant?
Yes. CaptchaFox processes only minimal visitor data on your instructions as your operator (operador), anonymizes identifying data right away, sets no cookies and provides a written processing agreement with contractual safeguards for international transfers.
Do I need visitor consent under the LGPD to use CaptchaFox?
Typically no. Bot protection can rest on your legitimate interest in securing your services (Art. 7 IX LGPD), and since the widget stores nothing on the visitor's device, there is no separate cookie consent to collect.
Can Brazilian websites send data to CaptchaFox's EU servers?
Yes, with the contractual safeguards the LGPD requires for international transfers (Art. 33). Our processing agreement covers these, and EU processing means the data lands in a jurisdiction with GDPR-level protection.
What should my privacy notice say about CaptchaFox?
Name CaptchaFox (Scoria Labs GmbH) as your operator for bot protection, describe the categories of data processed (the IP address and other technical signals used for bot detection), the legitimate-interest legal basis and link to the CaptchaFox end-user privacy policy.

More privacy regulations

Privacy CenterGDPRCCPA / CPRAUK GDPRSwiss nFADPDPDPAPDPAPIPLAPPIPrivacy Act (AU)

Fight bots and protect your users' data.

Don't give fraudsters and spammers a chance and protect your website with CaptchaFox today.

CaptchaFox protecting websites on desktop and mobile devices