Privacy Policy

This policy explains what CaptchaKraken LLC ("we") collects when you use the CaptchaKraken API and website, why, and what we do not collect. We have tried to make it specific enough to be checkable rather than broad enough to cover anything.

1. What we collect

Account information

Your email address, and — if you sign in with GitHub — your GitHub username and account identifier. Used to identify your account, issue keys, and contact you about the Service.

Usage metadata

For every metered inference response we record: a timestamp, the account and API key used, an opaque session identifier you supply, the puzzle class, credits charged and any reason a response was waived, prompt and completion token counts, how long the request took, the HTTP status, and an optional client label such as camoufox/0.4.11. This is what produces your usage history and your bill.

Payment information

Payments are processed by Stripe. We receive a transaction identifier, the amount, and the processor's fee. We never receive or store your card number.

Technical logs

Our servers and our CDN/reverse proxy record standard request metadata, including IP address, for security, abuse prevention, and diagnostics.

2. What we do not collect

We do not retain the images you submit. A screenshot is held in memory for the duration of the request, passed to the model, and discarded when the response is returned. It is not written to our usage records, which store counts and classifications only, and our application logs deliberately never serialise request bodies.

• We do not use your submissions to train or fine-tune models.
• We do not sell or rent personal information to anyone.
• We use no advertising trackers, no third-party analytics, and no tracking cookies. The public pages set no cookies at all. When accounts ship, a strictly necessary session cookie will be used for sign-in and nothing else.

3. Why we may process it

To provide the Service and perform our contract with you; to bill accurately and meet tax and accounting obligations; to secure the Service and prevent abuse (our legitimate interest); and to communicate with you about your account.

4. Who we share it with

We share only with processors necessary to run the Service:

• Stripe — payment processing and fraud prevention.
• Clerk — authentication, when account sign-in is enabled.
• Our hosting and infrastructure providers — servers, network, and backups.

We may also disclose information where legally required, or where necessary to investigate a violation of our terms.

5. How long we keep it

• Submitted images: not retained beyond the request.
• Usage and billing records: retained while your account is open and afterwards as long as required for tax, accounting, and audit purposes.
• Technical logs: a short rolling window, typically weeks, then discarded.
• Account details: until you ask us to delete them, subject to the above.

6. Your rights

You may ask us to access, correct, export, or delete your personal information, and to restrict or object to processing. Depending on where you live — for example under the GDPR or the Colorado Privacy Act — these may be legal rights rather than courtesies. Write to support@captchakraken.com and we will respond within 30 days. Note that we must keep billing records we are legally required to retain, even after an account is deleted.

7. Security

Traffic is encrypted in transit. API keys are stored only as hashes, never in recoverable form. Internal administrative endpoints are additionally protected by mutual TLS and are not reachable from the public internet. Access to production data is limited to those who need it. No system is perfectly secure, and we do not claim otherwise.

8. International transfers

We operate from the United States, and information is processed there. If you use the Service from elsewhere, you are sending it to the US.

9. Children

The Service is not for anyone under 18, and we do not knowingly collect information from children. If you believe we have, tell us and we will delete it.

10. Changes and contact

We will update this page if our practices change, and revise the date above. Questions, requests, or complaints: support@captchakraken.com, CaptchaKraken LLC, Colorado, USA.