Security News > 2020 > November > Google reCAPTCHA service under the microscope: Questions raised over privacy promises, cookie use

Google insists it doesn't use reCAPTCHA data for personalized adverts, and says as much in the reCAPTCHA terms of service.

Google's reCAPTCHA terms of service state that the service sends device and application data to the company.

The Register specifically asked Google whether reCAPTCHA data might be used for some aspect of the ad business other than personalized advertising.

"It's problematic for publishers who care about user privacy," he said, because if you implement reCAPTCHA on your website and don't disclose that you set google.com cookies, that runs the risk of violating some aspects of the "Right to know" requirement under the California Consumer Privacy Act.

"In my opinion, organizations in Europe that use reCAPTCHA for spam protection now need to move reCAPTCHA behind their consent walls," he said.

News URL

https://go.theregister.com/feed/www.theregister.com/2020/11/02/google_ad_recaptcha/