Forms: Introducing new CAPTCHA for better Spam protection

We’ve introduced a new CAPTCHA solution for all widgets with Form elements to provide better spam protection while keeping privacy requirements in mind :shield:

Affected widgets
  • Announcement Bar
  • Appointment Booking
  • Banner
  • Calculator
  • Countdown Timer
  • Contact Form
  • Form Builder
  • Subscription Form
  • Popup
  • Pricing Table
  • Slider
  • Spinning Wheel

The new CAPTCHA replaces Google reCAPTCHA Enterprise and is based on TryCAP. The solution is designed with privacy in mind:

  • No tracking
  • No cookies
  • Privacy-first approach to help support GDPR, CCPA, LGPD, and other privacy regulations

The CAPTCHA remains invisible for your visitors — there is no additional step or challenge to complete.

However, CAPTCHA verification is now required in the background: if the verification is not successfully completed, form submissions and related integrations will not be processed.

This update helps us keep your forms protected from spam and abuse while providing a more privacy-friendly experience for your visitors :raising_hands:

Hi @Max

It’s great to see this change!

I had originally raised concerns during the discussion about the booking form regarding Google reCAPTCHA’s GDPR compliance. I am therefore very pleased that Elfsight has taken this issue seriously and introduced a more privacy-friendly solution.

Replacing Google reCAPTCHA Enterprise with a solution that operates without tracking or cookies represents a significant improvement—especially for websites based in the EU. This should make consent management and GDPR compliance much easier while still providing protection against spam.

A big thank you to the Elfsight team for taking the feedback to heart and implementing a practical solution. :+1:

Hi Sina,

Thanks for the kind words :raising_hands:

We really appreciate you bringing this up earlier and helping us improve the solution. Happy to hear the new CAPTCHA approach addresses those privacy concerns while keeping forms protected :blush: