GDPR-friendly
No advertising tracking, no Google cookies.
Spam protection
Privacy-friendly, GDPR-aware spam protection as a reCAPTCHA alternative.
hCaptcha is the privacy-respecting drop-in replacement for reCAPTCHA. Core Forms offers it as a first-class option for sites that don’t want Google in the request path.
No advertising tracking, no Google cookies.
Default flow is silent unless a user looks suspicious.
Mix and match — use hCaptcha on contact forms only, for example.
Create a sitekey for your domain.
Settings → hCaptcha, paste the sitekey and secret.
Form → Settings → Spam protection → hCaptcha.
hCaptcha — and every other integration on this site — is included with your
license. Use code CFLAUNCH for 20% off either plan.