At NoCaptchaAI ("we", "our", or "us"), we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, and disclose your information when you access our website, use our API services, or use the NoCaptchaAI browser extension for Chrome, Edge and Firefox. Data handled specifically by the browser extension is described in Section 8.
We collect information to provide better services to all our users. The types of information we collect include:
We utilize the collected data for the following legitimate business purposes:
We do not sell your personal data to third parties. We may share your information in the following limited circumstances:
Service Providers: We use third-party providers only for defined purposes, and they may access data solely to perform those tasks on our behalf. They are contractually barred from using it for any other purpose.
httpbin.org, a third-party service that echoes back the public IP address of the request. It is contacted only when you actively use the extension's proxy checker, so that we can tell you whether your configured proxy is changing your IP. See Section 8.2.Legal Requirements: We may disclose your data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We maintain usage logs for a period of 90 days for debugging and security auditing, after which they are permanently deleted or anonymized. The same 90-day period applies to solve records generated by the browser extension, as described in Section 8.
Data in transit is encrypted with TLS. Access to stored data is restricted to the systems and personnel that need it to operate the service, and it is not used for any purpose beyond those described in Section 2.
Depending on your jurisdiction, you may have some or all of the following rights over your personal data. We honor these requests for all users regardless of location:
You can permanently delete your account at any time from the "Danger Zone" in your dashboard settings, or by emailing privacy@nocaptchaai.com. When you delete your account, we deactivate it, revoke your API credentials, and erase or irreversibly anonymize the personal data associated with it. We may retain a limited subset of records where required for legal, tax, fraud-prevention, or security reasons, and only for as long as necessary before secure deletion. Deletion is irreversible; any remaining balance or credit is forfeited.
NoCaptchaAI does not sell your personal information for money. To the limited extent that website analytics or advertising technologies could be considered "sharing" under the California Privacy Rights Act (CPRA), you may opt out at any time on our Do Not Sell or Share My Personal Information page or through our cookie preferences panel.
We recognize and honor the Global Privacy Control (GPC) signal. If your browser or a privacy extension transmits a GPC signal, we automatically treat it as a valid request to opt out of the sale and sharing of personal information for that browser — no further action is needed. We do not discriminate against users who exercise their privacy rights.
This section describes data handled by the NoCaptchaAI browser extension for Chrome, Edge and Firefox. Sections 1–7 continue to apply to your account, the API and the website.
| Data | Collected when | Why | Where it goes | Retention |
|---|---|---|---|---|
| Visited URL / website URL — the full URL of the page containing the CAPTCHA | Only when a supported CAPTCHA is detected and a solve is attempted | Several CAPTCHA providers bind the returned token to the originating page URL; the solve fails without it | api.nocaptchaai.com, and backup1.nocaptchaai.com or backup2.nocaptchaai.com on failover | 90 days |
| Host name / domain | Only when a solve is attempted | Included as part of the page URL above; used for solver reliability diagnostics | api.nocaptchaai.com | 90 days |
| CAPTCHA challenge content — challenge images, grid tiles, audio clips and the question text rendered inside the CAPTCHA widget | Only when a solve is attempted | This is the challenge our model solves | api.nocaptchaai.com | No longer than the 90-day usage-log period described in Section 4 |
| Challenge type identifier | Only when a solve is attempted | Routing the task to the correct solver | api.nocaptchaai.com | 90 days |
| API key | With every solve request | Authentication and credit accounting | api.nocaptchaai.com | Duration of the account |
| IP address | Only when you use the proxy checker | To show your current IP and confirm whether a configured proxy is changing it | httpbin.org, a third-party IP-lookup service | Not retained by us |
The extension includes optional tools for checking and applying proxies and for changing the browser User-Agent string. They are inactive unless you configure them.
httpbin.org). This request is made only when you actively use the proxy checker — it does not run in the background or on browser startup.CAPTCHA challenges can appear on any website, so the extension cannot know in advance which hosts it needs. Broad host access is used solely to detect supported CAPTCHA widgets on the page you are viewing.
NoCaptchaAI's use and transfer of user data received through the browser extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use that data only as necessary to provide, secure, maintain, and improve the extension's disclosed functionality.
If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us at privacy@nocaptchaai.com or our Data Protection Officer at dpo@nocaptchaai.com.