Compliance & privacy

reCAPTCHA sends information about the visitor's browser and behaviour to Google to work out the score.

• Mention in your privacy policy (My store → Pages) that the store uses Google reCAPTCHA to protect login and registration, and that Google's Privacy Policy and Terms apply.
• Google asks that the reCAPTCHA badge stays visible, or that you show the text "This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply."
• Under India's DPDP Act, this counts as processing for security; disclosing it in your privacy policy is enough for most stores.