Privacy

45 views

Skip to first unread message

Srijith

unread,

May 30, 2007, 4:44:30 AM5/30/07

to reCAPTCHA

Hi,

As far as I can see, the reCAPTCHA backend has the ability to link a
site using the service with the IP address of the machines visiting
the page on the site. Is this sort of link kept/retained? If so, for
how long and for what purpose? Shouldn't we as users be worried about
this as a privacy concern? If you don't do this at all, maybe you
could state so somewhere on your site so that we can put our mind at
ease?

-S_

reCAPTCHA Support

unread,

May 30, 2007, 4:59:59 AM5/30/07

to reca...@googlegroups.com

Hello,

We do need to keep this sort of data for the purposes of detecting attempts at abuse (for example, if somebody attempted to hire humans to solve CAPTCHAs, data such as IP addresses would help us detect such an attack). We plan to retain this data as long as it is relevant in detecting abuse.

All logs are kept on secure servers that are independent from our web serving infrastructure, reducing any risk of them being exposed. Access to the log servers is given to a limited number of individuals, all of whom work for Carnegie Mellon University, the sponsor of reCAPTCHA.