No enquiry gets lost
Whoever fills in a form simply fills it in — no puzzle, no second attempt, on any device and with any assistive technology.
SmartCaptcha
Humans in. Bots out.
SmartCaptcha checks in the background whether a human or a bot is submitting. No picture puzzles, no cookies, servers in Germany. One script tag in the form, one call in the backend.
Classic captchas cost conversions because they stop real people. Count the traffic lights, decipher the text, tick the box — and abandon the form when in doubt. SmartCaptcha turns that around: the visitor notices nothing, and the bot still does not get through.
The widget displays nothing. While the form is being filled in it collects timing, interaction and request signals — no cookies, no fingerprinting, no profile — and drops a token into the form on submit. The decision is then made on our server, not in the attacker’s browser: your backend sends the token to /v1/verify and gets an allow or deny back in under 80 milliseconds, with a score and a reason.
Every token is valid exactly once and bound to its request — intercepted tokens are worthless. How strictly checks are applied is set per website with a single slider, and each form gets its own action (contact, login, checkout) so the dashboard analysis stays clean.
Processing happens exclusively on a server in Germany. No cookies are created, only a random session ID in sessionStorage that disappears with the tab — no consent banner is needed for that. We never see the form contents themselves.
How it works
01
Embed the widget
One script tag with the site key in the form — the widget displays nothing. For WordPress the ready-made plugin is enough.
02
Collect signals
While the form is filled in, timing, interaction and request signals are collected — no cookies, no fingerprinting, no profile.
03
Verify server-side
Your backend sends the token to /v1/verify. The answer comes back in under 80 milliseconds with score, decision and reason.
04
Decide
Allow or deny — how strictly checks apply is set per website with one slider. The dashboard shows the analysis by day and by form.
Benefits
Bots are detected on the server
The check does not run in the attacker’s browser but on our side. Your backend asks and receives allow or deny with a score and a reason.
No consent banner required
SmartCaptcha sets no cookies, only a random session ID in sessionStorage — technically required under § 25 (2) no. 2 TDDDG.
Processing in Germany
One server in Regensburg, no transfer outside the EU. The Art. 28 GDPR processing agreement comes automatically with the subscription.
Integrated in ten minutes
One script tag with the site key in the form, one verify call in the backend — in WordPress the ready-made plugin is enough.
Intercepted tokens are worthless
Every token is bound to exactly one request and expires after the first check. Rate limits per form come on top.
All features
Invisible verification — no picture puzzles, no click
Server-side decision in under 80 milliseconds
Score and reason for every check (allow / deny)
Replay protection: every token is valid exactly once
Strictness per website, set with one slider
A separate key and action for each form
Ready-made WordPress plugin including Contact Form 7 and WPForms
Examples for PHP, Node.js, Python — and an API for everything else
No cookies, no fingerprinting, no tracking
Hosted in Germany, no transfer to third parties
Analysis by day and by form in the dashboard
Light/dark themes, DE/EN languages, AJAX-ready
Plans
Pricing
Starter
€9.95
per month plus VAT
- 10,000 checks per month
- 1 website, 5 keys
- Widget and server-side verification
- WordPress plugin included
- Custom actions per form
- Replay protection and rate limits
- Overage: €1.00 per 1,000 checks
Growth
€19.95
per month plus VAT
- Everything in Starter
- 100,000 checks per month
- 5 websites, 20 keys per website
- Priority handling of support requests
- Overage: €0.70 per 1,000 checks
Scale
€49.95
per month plus VAT
- Everything in Growth
- 500,000 checks per month
- 20 websites, 50 keys per website
- Guaranteed response times on request
- Overage: €0.50 per 1,000 checks
- For agencies looking after many client sites
All prices in euros plus VAT · cancellable monthly
Frequently asked questions
Do visitors really never see a puzzle?
Normally no. Only when the signals stay weak does “smart” mode ask for a short press on a surface — there are no picture puzzles.
Do I need a cookie banner for SmartCaptcha?
No. No cookies are set, only a random session ID in sessionStorage that disappears with the tab — technically required under § 25 (2) no. 2 TDDDG.
Which data leaves my website?
Never the form contents. Only the interaction signals, the token and a truncated, additionally hashed IP address are transmitted.
How long is data stored?
The check value in the token for at most three minutes, the one-time ID for at most four. Anonymous counters per day and form for 35 days, server logs for 7 days.
Does it work with WordPress too?
Yes, there is a ready-made plugin. Contact Form 7 and WPForms are supported directly, custom forms hook in via the plugin’s filters.
What happens if verification is disrupted?
We deliberately recommend failing closed: if no approval comes back, the submission is rejected. For AJAX forms, SmartCaptcha.refresh() fetches a fresh token.
Rather see it live
than read about it?
We show you the product on the real system, clarify switching and data protection – and only then make an offer.
Questions about the product? Write to us. We reply within 24 hours.
Questions about the product? Write to us. We reply within 24 hours.