Skip to main content
Free trial
Login
PIPL

Bot protection and China's PIPL

China's Personal Information Protection Law demands necessity, transparency and tight control over entrusted processing. CaptchaFox's minimal, promptly anonymized footprint keeps your PIPL assessment as small as possible.

  • Entrusted party under contract
  • Strict necessity principle
  • No sharing with third parties

Entrusted party under contract

CaptchaFox processes personal information only within the purpose and methods you agree to in a written entrustment contract.

Necessity, strictly applied

Only the signals needed to tell humans from bots are processed – the direct application of the PIPL's necessity principle.

Security measures built in

Identifying data is anonymized as early as possible and never stored permanently in plain text.

PIPL compliance checklist

How CaptchaFox supports operators subject to the Personal Information Protection Law.

  • Entrusted processing under contract

    Art. 21 PIPL

    The PIPL requires a contract fixing purpose, duration, method and protection measures for entrusted processing – our processing agreement covers exactly that.

  • Necessity principle

    Art. 6 PIPL

    Processing is limited to the minimum scope needed for bot detection, with no collection beyond it.

  • Transparency supported

    Art. 17 PIPL

    We document exactly what the widget processes, so you can meet your notification duties towards individuals.

  • Protection measures

    Art. 51 PIPL

    Early anonymization, encryption in transit and EU data-center security support the technical measures the PIPL requires.

  • No provision to third parties

    Art. 23 PIPL

    Visitor data is never sold, shared or used for advertising – it exists only to produce a bot-or-human verdict.

Frequently asked questions

Everything you need to know. Can't find your answer? Contact our support team.

Can websites serving users in China use CaptchaFox?
Yes, subject to the PIPL's cross-border rules that apply to you as the operator. CaptchaFox supports the assessment with a written entrustment contract, strict data minimization and prompt anonymization – the smaller and shorter-lived the data, the simpler your transfer analysis.
Is CaptchaFox an entrusted party under the PIPL?
Yes. CaptchaFox processes personal information only within the purpose, duration and methods fixed in a written contract with you, as Art. 21 PIPL requires, and returns or deletes data when the engagement ends.
What data leaves the visitor's browser?
The IP address, plus other technical and usage signals needed for verification. Identifying data is anonymized as early as possible, and no cookies or persistent identifiers are used.
Does CaptchaFox share personal information with third parties?
No. Signals stay inside CaptchaFox, and personal information is not kept beyond what the verification requires – identifying data is anonymized without delay. Our only subprocessors are EU hosting and CDN providers bound by contract.

More privacy regulations

Privacy CenterGDPRCCPA / CPRAUK GDPRSwiss nFADPLGPDDPDPAPDPAAPPIPrivacy Act (AU)

Fight bots and protect your users' data.

Don't give fraudsters and spammers a chance and protect your website with CaptchaFox today.

CaptchaFox protecting websites on desktop and mobile devices