Google’s reCAPTCHA, widely used on over 15 million websites, faces privacy concerns as the French privacy commission CNIL finds it using excessive personal data beyond security purposes. CNIL discovered this while investigating an e-scooter company, Cityscoot, that used reCAPTCHA without obtaining user consent or providing information about data usage.

Despite reCAPTCHA relying on cookies, Cityscoot argued it was “strictly necessary.” However, CNIL found the cookie was used for additional purposes, requiring user notification and opt-out options. This poses a dilemma for websites balancing functionality and misuse prevention.

Reflectiz offers a solution by identifying and addressing potential risks posed by third-party components, ensuring data protection and compliance.

Securing Your Online Presence

Keep your online businesses safe by mitigating security and privacy risks resulting from next generation third-party threats on your website, without adding a single line of code.

Get Web Asset Free Assessment

Request a free non-intrusive security assessment of your website, and get a report with an overview of client-side security risks.