Features

An in-depth look at some of the Private Captcha features.

Rate limiting

Smart difficulty scaling

Instead of asking users to solve frustrating puzzles, Private Captcha solves an invisible cryptographic task fully in the background. Solving a task requires a certain amount of compute resources (e.g. CPU and/or GPU time) from the user. Amount of resources needed is known as "difficulty".

Automatic adjustment.
The system automatically adjusts the task difficulty depending on current access patterns to the protected resource and access patterns of the actor themselves.
Exponential growth.
Difficulty grows exponentially, with each small increase requiring much more compute resources from bots. This very quickly makes any attack economically nonviable.
LLM resistant.
Compute resource requirements to solve the task provide equal security regardless of bots intelligence level, making it effective even as AI technology improves.

In Private Captcha dashboard you can configure the base difficulty for tasks and how fast difficulty grows based on the dynamics of current access patterns. So it can be perfectly tailored for your users.

server load
Direct traffic
With Private Captcha
time
App screenshot

GDPR compliance

EU isolation

Private Captcha was built with GDPR/CCPA compliance by design. In addition to that you can restrict actual networking to go through EU servers.

EU suppliers

Private Captcha relies only on EU companies. Servers, storage, CDN, email - you name it - backed by EU businesses, which have strict GDPR requirements. Current suppliers include Hetzner, Bunny and Scaleway.

Learn more

EU routing

Private Captcha provides technical means to make client-side widget and server-side validations to connect only to EU servers. At the expense of small latency increase, this ensures no user data will be processed on non-EU servers.

Check docs

Strict privacy

Private Captcha does not collect or process any Personally Identifiable Information (PII). We have a Data Processing Agreement ready in addition to our Privacy Policies. Our code is public so all claims can be easily verified.

DPA

UI options

Widget customization

Private Captcha widget supports different themes, languages, screen sizes and more.

Different themes.
Widget comes with pre-made light and dark themes, but also it is possible to customize just about any color inside the widget.
Localization.
Widget text is available in most European languages (and it's trivial to add more). So your users will know what to do!
Popup / hidden mode.
Widget can be hidden and shown as a popup or it can be permanently hidden and you can create your own visualization.

Check docs

Also includes an invisible widget.

Make any DIY visualization you want using events and hooks of our library.

Check docs

Compliance

Easy compliance with account audit logs

Keep your data safe and know exactly who changed what and when. View activity at the property, organization, or account level. Export logs to CSV for any time range.

You get 14 days of audit data included with every plan, with an upgrade option for 365 days.

Automation

Platform API

Create and edit properties in bulk, manage organizations and more using our Platform API. Now almost everything you can do in the portal is available as an HTTP endoint.

Bulk operations.
Batch- create/edit/delete properties, which is perfect for import and automated management of client websites.
Audit logs.
All operations using API produce the same compliance audit logs as operations in the Portal.

Check docs

Platform API
bash

curl -X POST https://api.privatecaptcha.com/org \
  -H "X-API-Key: your-api-key" \
  -H "Content-Type: application/json" \
  -d '{"name": "New Marketing Org"}'


curl -X POST https://api.privatecaptcha.com/org/vDWtASYqrB/properties \
  -H "X-API-Key: your-api-key" \
  -H "Content-Type: application/json" \
  -d '[{"name": "Blog", "domain": "blog.example.com"}]'

Get property and account level stats in the dashboard

Property stats

Dashboard

Usage statistics

Staying on top of how your properties are accessed helps to select correct difficulty settings, spot verification problems or monitor your billing.

Data that is used for these statistics is aggregated usage patterns that do not contain any Personally Identifiable Information (PII).

Protect your forms and APIs from abuse

Independent, privacy-first, self-hostable CAPTCHA service made in EU