Privacy Policy

Last updated: March 2026

1. Introduction

Cloudflush Networks ("we", "us") operates the BotFlush CAPTCHA service. This policy explains how we collect, use, and protect data.

2. Data We Collect

For Website Visitors (CAPTCHA Users)

When a visitor interacts with a BotFlush CAPTCHA, we collect:

Mouse/touch movement patterns (behavioral analysis)
Browser User-Agent, screen resolution, timezone
GPU renderer information (via WebGL)
IP address and approximate country (via CDN headers)

This data is used solely to distinguish humans from bots. We do not use tracking cookies.

For Account Holders (Console Users)

Email address (for authentication)
Usage statistics (verification counts, API calls)
Payment information (processed by Paddle; we do not store card details)

3. How We Use Data

To provide and improve the CAPTCHA verification service
To detect and prevent automated abuse
To manage your account and billing
To comply with legal obligations

4. Data Retention

Verification logs are retained for a configurable period (default: 30 days) and then automatically deleted. Account data is retained for the duration of your account.

5. Data Sharing

We do not sell your data. We share data only with:

Paddle — payment processing (as Merchant of Record)
Law enforcement — when legally required

6. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to access, correct, delete, or export your data. Contact admin@botflush.com to exercise these rights.

7. Security

We use encryption (TLS), access controls, and secure coding practices to protect your data.

8. Contact

Data Controller: Cloudflush Networks
Email: admin@botflush.com