Both are positioned as privacy-friendly. The differences matter once you read the fine print.
hCaptcha solved a real problem in 2020 — a privacy-respecting alternative to reCAPTCHA that didn't sit on Google's stack. It's a legitimate product. But the business model has a quirk worth understanding: hCaptcha is fundamentally a data-labelling service. When your users solve image grids, they're labelling data for hCaptcha's customers. Your traffic is the raw material.
This isn't sinister — it's how the product is funded. But it has consequences: you can't fully control what your users are asked to label, the visual difficulty escalates based on factors outside your tuning, and the business interest is misaligned with reducing user friction.
TrustedCaptcha doesn't have a labelling business. We're funded by Pro subscriptions. The free tier exists as a loss-leader, not as a data-collection mechanism.
| TrustedCaptcha | hCaptcha | |
|---|---|---|
| Business model | Subscription only | Data labelling + Enterprise sales |
| Data residency | Germany — EU only | Multi-region, customer-configurable |
| GDPR posture | Native; pre-signed DPA | Available; SCCs apply for non-EU regions |
| Free tier | 1,000 / day, all features | 1M / month, image grid only |
| Paid plans | €25/mo flat | $99/mo Pro; Enterprise custom |
| Visible challenges | 6 modes incl. smart-click default | Primarily image grid; "Privacy Pass" for repeat users |
| Accessibility | Audio default; disability-only mode | Audio mode; documented friction with screen readers |
| Drop-in replacement | Yes — supports h-captcha-response field | n/a |
| Open-source widget | Yes (MIT) | No |
| "Free" tier funded by | Pro subscriptions | Customer image labelling |
Volume. The hCaptcha free tier of 1M requests/month is more generous than ours, and for high-volume use cases that don't need flexible challenge modes, it's a strong free option. The Privacy Pass integration is also genuinely useful: repeat users on the same browser can skip challenges entirely after their first solve.
The bot-detection model has been refined over years of operation across a substantial customer base. For pure image-grid workloads, it's competitive with reCAPTCHA.
Pricing predictability — €25/month flat for unlimited verifications versus hCaptcha's $99 Pro tier. Mode flexibility — six modes versus primarily image-grid. Accessibility-first design rather than retrofitted audio. Smaller, slimmer widget (target 12 KB gzipped versus hCaptcha's larger payload). And — the philosophical core — your users' challenge solutions are not used to train labelling models for third-party customers.
For most form-protection use cases (login, signup, comments, contact forms, e-commerce), the smart-click default of TrustedCaptcha results in less friction for legitimate users than hCaptcha's image-grid default.
The widget supports the h-captcha-response field name, so existing form code keeps working unchanged. The server-side verify is a one-line URL change. Full guide at /migrate/hcaptcha.
Use hCaptcha if you have very high free-tier volume needs and image-grid challenges work for your audience. Use TrustedCaptcha if you want predictable pricing, mode flexibility, an accessibility-first design, and a business model where your users' interactions aren't part of the product.
