Privacy policy clauses for Google reCAPTCHA
Google reCAPTCHA is a security service that distinguishes humans from bots by analyzing behavioral patterns like mouse movements, keystroke timing, and device characteristics. Websites use it to prevent automated abuse, spam, and unauthorized access.
Free scan · No signup · Results in 60 seconds
What data Google reCAPTCHA collects
Your privacy policy must disclose each of the following data types when you use Google reCAPTCHA.
When does Google reCAPTCHA trigger privacy obligations?
Google reCAPTCHA activation triggers data protection obligations the moment you load its client-side script on your site or app. The service immediately begins collecting behavioral telemetry—mouse movements, keystroke timing, browser plugins, device fingerprinting—and transmits it to Google's servers in the United States, along with the visitor's IP address. Google also reads and writes the `_GRECAPTCHA` cookie (6-month duration).
