Privacy Policy

Last Updated: June 1, 2026

Our Core Philosophy

Privacy is at the heart of what we do. Unlike traditional CAPTCHAs, BenEgeDeniz Forge does not track your users across the web, does not use cookies, and does not harvest personal data.

1. Data We Process

To guarantee cryptographic security and service reliability, we only process minimal, non-identifiable parameters:

  • Proof-of-Work Metrics: Solver duration and difficulty parameters to keep challenges secure and performant.
  • IP Address Hash: To protect forms against DDoS abuse, we compute a one-way SHA-256 hash of the request IP address. The original raw IP addresses are never permanently logged.
  • Behavioral Analysis Signals: To provide advanced bot protection, generic device capabilities, mouse movements, scrolling, and touch events are temporarily analyzed and scored as "interaction entropy". These signals do not contain any Personally Identifiable Information (PII) and the raw telemetry is discarded after analysis. In case of security violations, only non-identifiable metadata is retained as a Security Event.
  • Verification Statistics: Aggregated metrics such as the total number of verification requests and success rates are stored to be displayed on your dashboard. These statistics do not contain any personal or trackable information.

2. Cookies and Tracking

BenEgeDeniz Forge sets exactly zero cookies in your browser. While we evaluate generic browser capabilities to thwart automated bot activity, we do not use this data for cross-site tracking or to generate unique individual fingerprints.

3. Data Sharing

We do not sell, trade, or share any metrics or logs with third parties.

4. Account Information & BenEgeDeniz ID

For site owners who register and manage their sites using our dashboard, account information is managed by BenEgeDeniz ID and is bound by its respective privacy policy. This does not affect, concern, or bother standard site visitors who are simply verifying their humanity. Regular visitors are not required to provide account information or interact with BenEgeDeniz ID.

5. GDPR Compliance Statement

Under the General Data Protection Regulation (GDPR), BenEgeDeniz Forge acts as a Data Processor for the captcha verification services provided to site owners (who act as Data Controllers). We do not collect, store, or process personal data of end-users verifying through our widget. The IP addresses used during verification are immediately hashed using a one-way cryptographic SHA-256 algorithm on the fly; this hash is anonymized and cannot be reverse-engineered to identify an individual.

For site owners who register accounts, we process essential dashboard credentials (name, email) under GDPR Article 6(1)(b) (performance of a contract) solely to manage registration and provide support. Registered site owners have the right to access, rectify, restrict, or delete their account data at any time.