Skip to main content
ALTCHA®

CCPA Compliance

ALTCHA is a privacy-first solution designed to simplify compliance with the California Consumer Privacy Act (CCPA), available either self-hosted on your own infrastructure or as ALTCHA Cloud, hosted entirely within the EU. Either way, ALTCHA eliminates tracking and cookies; the claims below describing data staying "within your infrastructure" apply to the self-hosted deployment — with ALTCHA Cloud, ALTCHA processes data on your behalf as a service provider, from EU-based infrastructure.

CCPA Compliance

1. No Cookies or Tracking

ALTCHA does not use:

  • Cookies nor Persistent Identifiers – No tracking for cross-context behavioral advertising.
  • Personal Data Collection – Verification logs are anonymized, with no ties to individual consumers.

For more technical details on how Sentinel respects and protects user privacy, please see the Privacy Protection documentation.

2. Self-Hosted or ALTCHA as Service Provider

  • Self-hosted – All data processing occurs on your servers, with no reliance on external vendors.
  • ALTCHA Cloud – ALTCHA processes data solely to provide the service to you, acting as a "service provider" under CCPA — it does not sell or share consumer data.
  • Either way, there's no third-party data sharing—ensuring compliance with CCPA's "Do Not Sell/Share" requirements.

3. No Personal Information Storage

  • Verifies interactions without collecting names, IPs, or other identifiers linked to consumers.
  • IP addresses and metadata are anonymized or discarded, avoiding classification as "personal information" under CCPA.

4. No Subprocessors or Data Sales

  • Self-hosted – Zero third-party dependencies, eliminating CCPA obligations for vendor disclosures or data sale restrictions.
  • ALTCHA Cloud – ALTCHA is your sole service provider, with no further subprocessors and no sale or sharing of consumer data.

CCPA Compliance Checklist

While ALTCHA is compliant by design, ensure your implementation aligns with CCPA best practices:

  • No Opt-Out Requirements – Zero tracking or data sales = no "Do Not Sell/Share My Personal Information" obligations.
  • Data Minimization – Collects no identifiable consumer data by default.
  • No Consumer Rights Requests – No stored personal information = no deletion or access requests under CCPA §1798.100+.
  • Jurisdictional Control – Self-hosting keeps data within your infrastructure; ALTCHA Cloud processes it in the EU as your service provider, not a sale or share of data.

Why It Matters

CCPA compliance is effortless with ALTCHA:

  • Self-hosted or Cloud = Full ownership of consumer data, whether processed on your own infrastructure or by ALTCHA as your service provider.
  • No tracking or profiling = No "sale/sharing" disclosures or opt-out mechanisms.
  • No cookies or identifiers = Simplified compliance with CCPA’s privacy requirements.

By design, ALTCHA reduces legal overhead while protecting consumer privacy.

ALTCHA is designed to support CCPA-compliant implementations, but final responsibility for regulatory compliance lies with you, the data controller. Ensure your deployment does not introduce additional data processing or storage beyond what ALTCHA provides.

Start typing to search...

↑ ↓ Navigate ↵ Select