function onSuccess(token) {
console.log('CAPTCHA verified:', token);
// Submit your form or enable submit button
}
function onError(error) {
console.error('CAPTCHA error:', error);
// Handle error (show message to user)
}
None! sCaptcha is privacy-first. We don't collect, store, or track any personal data. No cookies, no fingerprinting, no user profiling. We only process the CAPTCHA response to verify it's legitimate, and your IP address is used temporarily for rate limiting (not stored).
How does the verification work?
When a user completes the CAPTCHA, we generate a signed token that expires in 1 minute. Your server verifies this token using your secret key. The token contains no personal information - just verification status and timestamp.
What's the difference between Vision and Text CAPTCHA?
Vision CAPTCHA: Users select images based on instructions (e.g., "Select all cats"). More engaging but requires good vision.
Text CAPTCHA: Users type distorted characters they see. More accessible and works with screen readers, but can be harder to read.
Is sCaptcha GDPR compliant?
Yes! Since we don't collect any personal data, cookies, or tracking information, sCaptcha is fully GDPR compliant. No consent banners needed for the CAPTCHA itself.
Can I customize the appearance?
Yes! sCaptcha supports light/dark themes and automatically adapts to your page. You can set data-theme="light", data-theme="dark", or data-theme="auto" to match user's system preference.
What about accessibility?
sCaptcha is designed with accessibility in mind. The Text CAPTCHA mode works with screen readers, and both modes support keyboard navigation. We follow WCAG guidelines for contrast and usability.
How do I get my sitekey and secret?
Register on our dashboard, add your website domain, and you'll receive your sitekey (public) and secret (private). The sitekey goes in your HTML, the secret stays on your server for verification.
Can I use both Vision and Text on the same page?
You need separate sitekeys for Vision and Text modes. You can have multiple CAPTCHA widgets on the same page, but each needs its own unique container and sitekey.
What happens if the CAPTCHA fails to load?
sCaptcha includes fallback mechanisms. If the service is unavailable, you can configure your form to either allow submission or show an error message. Always implement server-side verification as the final check.
Is there rate limiting?
Yes, we implement smart rate limiting to prevent abuse while allowing legitimate users. Failed attempts trigger temporary cooldowns, and there are daily limits per domain to prevent API abuse.