- What happens at the daily limit on the free plan?
- The widget keeps working — challenges still mint and verify — but the dashboard notifies you at 80% and 100%. You can upgrade at any time, or wait until the next day. We don't block legitimate users at the limit.
- Why is the free tier so much smaller than reCAPTCHA's?
- Because we're not subsidised by an advertising platform. reCAPTCHA's free quota exists because Google captures behavioural data from every solve. We don't, and we can't price like a side project that pays its way through surveillance.
- Can I self-host?
- The code is published. You can run your own instance if you want — but you take on the operational burden (TLS, scaling, abuse, image pool moderation, GDPR). Most customers find €25/month cheaper than the engineering time.
- Do you offer enterprise / high-volume pricing?
- Above ~10M verifications/month, contact us — pricing becomes per-million plus a flat platform fee, and we can negotiate a real SLA. Below that, Pro is the price.
- Where is my data stored?
- Frankfurt, Germany (Hetzner). All processing inside the EU. Operator is AESHA Technology Services Limited (Seychelles, CRN 210193) under a DPA we'll sign with you. No data leaves the EU.
- What's the actual retention?
- Verifications: 30 days (Free) / 90 days (Pro). Challenges: 7 days. Audit log: 13 months. IPs are truncated at /24 (IPv4) or /64 (IPv6) before storage; user agents are hashed with a per-deployment pepper. Detailed schedule in the privacy policy.
- Can I get a DPA?
- Yes, on Pro. We have a signed Article 28 DPA template. Email us with your company details and we'll countersign within 2 business days.
- What payment methods?
- Stripe. Cards (Visa, Mastercard, AmEx), SEPA Direct Debit for EU customers, and Bancontact/iDEAL/Sofort. Invoices are issued automatically; VAT handled per EU rules.
