Skip to main content
ALTCHA®

GDPR Compliance

ALTCHA is a privacy-first solution designed to simplify compliance with the General Data Protection Regulation (GDPR), available either self-hosted on your own infrastructure or as ALTCHA Cloud, hosted entirely within the EU. Unlike third-party services outside either deployment, ALTCHA eliminates external data processing, tracking, or cookies — keeping user data under your control (self-hosted) or within the EU under ALTCHA's care (Cloud).

GDPR Compliance

1. No Cookies or Tracking

ALTCHA does not use:

  • Cookies nor Fingerprinting – No cookie consent banners required.
  • Personalized Analytics – Verification logs are anonymized or discarded, with no ties to individual users.

For more technical details on how Sentinel respects and protects user privacy, please see the Privacy Protection documentation.

2. Self-Hosted or EU-Hosted

  • Self-hosted – All data processing occurs on your own servers, with no reliance on external providers.
  • ALTCHA Cloud – Data processing occurs on ALTCHA's infrastructure, located entirely within the EU, with no transfers outside it.
  • Either way, data never leaves the deployment you choose.

3. No Personal Data Storage

  • Verifies interactions without collecting identifiable user information.
  • IP addresses and metadata are either discarded immediately or processed in a way that does not allow user identification, helping avoid classification as personal data under GDPR.

4. No Subprocessors or Data Sharing

  • Self-hosted – Zero third-party dependencies, eliminating GDPR complexities tied to external vendors.
  • ALTCHA Cloud – ALTCHA acts as your sole processor, with no further subprocessors.

GDPR Compliance Checklist

While ALTCHA is compliant by design, ensure your implementation follows GDPR best practices:

  • No Cookie Consent Needed – Zero cookies mean no additional disclosures.
  • Data Minimization – Collects only what’s necessary (if anything).
  • Automated User Rights Compliance – No stored personal data = minimal need for access/deletion request handling.
  • No Cross-Border Transfers – Self-hosting keeps data within your legal jurisdiction; ALTCHA Cloud keeps it within the EU.

Why It Matters

GDPR compliance is effortless with ALTCHA:

  • Self-hosted or EU-hosted (Cloud) = Full data control, either way.
  • No tracking = No legal overhead.
  • No cookies = Simplified user experience.

By design, ALTCHA reduces compliance risks while protecting user privacy.

ALTCHA is designed to support GDPR-compliant implementations, but final responsibility for regulatory compliance lies with you, the data controller. Ensure your deployment does not introduce additional data processing or storage beyond what ALTCHA provides.

Tippen, um zu suchen...

↑ ↓ Navigieren ↵ Auswählen