Last updated: January 1, 2026
We collect information you provide when creating an account (name, email, password hash). We also collect usage data including API requests, solve times, task IDs, and the site URLs you solve captchas for.
We use collected information to provide and improve the Service, enforce quotas and rate limits, generate aggregate usage statistics, and communicate important Service changes or security notices to you.
Account and usage data is stored in a secure SQLite database hosted on our servers. Passwords are hashed using bcrypt and are never stored in plaintext. API keys are stored hashed where possible.
We do not sell, rent, or share your personal information with third parties except as required by law, or as necessary to operate the Service (e.g., infrastructure providers under NDA).
The Service uses session cookies for authentication (NextAuth.js). These cookies are HTTP-only and session-scoped. We do not use tracking or advertising cookies.
If you provide proxy credentials as part of API requests, these are used only for the duration of that solve session and are not persisted to our database.
Account data is retained for as long as your account is active. Task history older than 90 days may be pruned. You may request account deletion by contacting support.
We implement reasonable technical and organizational measures to protect your data. However, no system is completely secure. Notify us immediately if you suspect any unauthorized access.
You may access, correct, or delete your personal data by logging into your dashboard or contacting support. You may also revoke API keys at any time.
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the dashboard.