Privacy

evil-captcha is an art project. It collects as little as it can and never stores who you are.

Who is responsible

[email protected]

Your answers

To check an answer, we send it to OpenRouter, Inc. (USA), which passes it to an AI model that judges it. Neither of them sees your IP address or your name.

Each answer is logged together with its task, its score, the time and a random session ID. The log holds no IP addresses and no names, so we cannot tell who wrote an answer. It is deleted after 30 days.

Please do not write anything about yourself into your answer.

Your name on the certificate

The name you enter is only used to create your certificate and show it to you. It is sent along with every answer so the form keeps it, but it is not stored until the certificate is created. The certificate stays in our server's memory, so you can open it again, until your session is forgotten after 60 minutes without activity. It is never written to disk or logged.

Verifying a certificate

A certificate you paste to verify it is only checked and shown back to you. It is never stored or logged.

Your IP address

Our server needs your IP address to answer your browser and to allow only one answer every 5 seconds. It is kept in memory only for that and never written to disk.

The site is delivered through Cloudflare, Inc. (USA), which also processes your IP address and request data to deliver the site and protect it from attacks.

Cookie

A single cookie holds a random session ID, so the site knows which task is yours and whether you passed. It is strictly necessary, deleted when you close your browser and forgotten by our server after 60 minutes without activity. There is no tracking and no analytics.

Legal basis and your rights

We process this data based on our legitimate interest in running the site and protecting it from abuse (Art. 6(1)(f) GDPR).

You have the right to access, rectification, erasure, restriction of processing and objection, and you may complain to a data protection supervisory authority. As the log cannot be linked to you, we can usually not find your entries in it.