Privacy Policy

1. Introduction

BotFlush ("we", "us") provides CAPTCHA verification services. This policy explains what data we process when website visitors interact with BotFlush-protected forms, and when site operators use our Console.

2. Data We Collect

For End Users (Visitors)

When you complete a BotFlush challenge, we process:

1. IP address — used transiently for rate limiting; not stored permanently
2. Challenge interaction data — click coordinates and timing within the challenge widget
3. User-Agent string — for device compatibility

We do not collect: names, email addresses, cookies, browser fingerprints, or any personally identifiable information (PII).

For Site Operators (Console Users)

When you register for a Console account, we collect your email address and hashed password. Payment is processed by our Merchant of Record (Paddle) — we never see or store payment card details.

3. How We Use Data

1. To distinguish humans from automated bots
2. To enforce per-site rate limits
3. To provide aggregated verification statistics in the Console

We do not use any data to train machine learning models, build advertising profiles, or share data with third parties.

4. Data Retention

Challenge interaction data is discarded after verification completes. Aggregated statistics (success/failure counts) are retained for up to 90 days. Console account data is retained until account deletion.

5. GDPR & International Transfers

BotFlush processes minimal data by design. Site operators can enable GDPR Strict Mode in the Console to further restrict data processing for EU visitors. We process data on servers located in multiple regions; no data is transferred to jurisdictions without adequate protection.

6. Your Rights

Under GDPR and similar regulations, you have the right to access, rectify, or delete your personal data. Since we collect minimal data from end users (no PII), most requests apply to Console account holders. Contact admin@botflush.com for any data requests.

7. Cookies

BotFlush does not set any cookies on end-user browsers. The Console application uses a session cookie strictly for authentication — no tracking or analytics cookies are used.

8. Contact

For privacy-related inquiries: admin@botflush.com