FitMyKB Verify
What the CAPTCHA collects from visitors, what we keep for site owners, and what we never do. Updated 18 October 2026.
Last updated 18 October 2026
The website uses FitMyKB Verify to tell people from bots. When the box loads and you tick it or solve a puzzle, we receive the website's address, your browser type and language, the result of a small calculation your browser did, and light signals such as whether a pointer, key or finger was used and how a puzzle was solved. We don't receive what you type into the website's form.
The widget sets no cookies, keeps nothing on your device, and doesn't follow you across websites. We never build a profile of you or use any of this for advertising.
Used only while checking you: scrambled, and kept for a few minutes to make the work harder after repeated failures. It isn't stored with your result.
A one-time token and its score, for two minutes, so the website's server can check it once. Counts per website (checks passed, failed and puzzles shown) for the website owner's statistics, without anything about who you are.
The website that shows the box decides to use it and is responsible for telling you; we process this information on its behalf, only to protect its forms.
We keep your name, email, mobile number, a secure hash of your password, your websites and keys, your plan and payments. Card and PayPal payments are handled by PayPal: we receive the order number, amount and result, never card details.
Tokens: two minutes. Scrambled IP data: minutes. Website statistics: 400 days. Account and payment records: until you delete the account, and payments as long as tax law requires.
Write to us on the contact page. Site owners can delete their account and its websites at any time from the dashboard.
