ALTCHA

ALTCHA

ALTCHA is an open-source CAPTCHA alternative that uses proof-of-work challenges for bot protection. Its scripts present computational puzzles to verify human visitors without setting tracking cookies, collecting personal data, or relying on third-party services.

Overview

ALTCHA is a privacy-focused, open-source bot protection solution that offers an alternative to traditional CAPTCHA services like reCAPTCHA or hCaptcha. Instead of relying on behavioral tracking, third-party cookies, or image recognition puzzles, ALTCHA uses cryptographic proof-of-work challenges that the visitor's browser solves computationally. This approach verifies human visitors without collecting personal data or depending on external tracking infrastructure.

What This Script Does

ALTCHA's scripts present a computational proof-of-work challenge when a visitor encounters a protected form or action. The visitor's browser performs a series of cryptographic calculations to solve the challenge, and the solution is submitted to the server for verification. This process typically takes a fraction of a second for a human visitor's device but is computationally expensive for bots attempting to submit at scale. The scripts do not set tracking cookies, collect personal data, or make requests to third-party services. All verification can be processed entirely on your own server, keeping the interaction between the visitor's browser and your infrastructure. No fingerprinting, behavioral profiling, or cross-site tracking is involved.

Consent & Compliance

ALTCHA is designed with privacy compliance as a core feature. It does not set cookies, collect personal data, or communicate with third-party servers. The proof-of-work challenge is a purely computational verification that does not involve tracking or profiling visitors. Under GDPR, ePrivacy, and similar frameworks, ALTCHA's scripts qualify as strictly necessary for the security function they provide — protecting forms from automated abuse. The open-source nature of the project allows complete auditability of its privacy claims.

Should You Block This Without Consent?

No. ALTCHA provides essential bot protection functionality without setting cookies or collecting personal data. Its proof-of-work approach is privacy-preserving by design and qualifies as a strictly necessary security measure.

Visit website

Consent Categories

Essential

Also Known As

altcha captchaproof of work captchaaltcha bot protectionopen source captchacookie-free captchaaltcha alternative

Industries

Computers Electronics and TechnologyProgramming and Developer SoftwareBusiness and Consumer ServicesBusiness Services

Tracked Domains (1)

altcha.orgEssential

Frequently Asked Questions

Does ALTCHA require cookie consent on my website?

No. ALTCHA is a privacy-by-design bot protection solution. It uses cryptographic proof-of-work challenges that do not set cookies, collect personal data, or communicate with third-party servers. Under GDPR and ePrivacy it qualifies as a strictly necessary security measure exempt from consent requirements.

What does the ALTCHA script do technically?

ALTCHA presents a computational challenge to the visitor's browser when a protected form is encountered. The browser performs cryptographic calculations to solve the challenge, then submits the solution to your server for verification. No cookies are set, no fingerprinting occurs, and no data is sent to third-party services.

How does ConsentStack classify and treat ALTCHA?

ConsentStack identifies ALTCHA as an essential security vendor. Because it sets no cookies and collects no personal data, ConsentStack does not place it behind a consent gate. ALTCHA is allowed to load freely, ensuring your forms remain protected against bot abuse without any consent dependency.

Related Vendors

Firebase
Firebase
Firebase is Google's mobile and web application development platform offering authentication, real-time database, cloud functions, and analytics. Web SDK scripts initialize Firebase services and may track app events via Firebase Analytics, which is powered by Google Analytics 4. Widely used in single-page apps and PWAs for backend infrastructure and usage tracking.
Google
Google
Google is the dominant provider of web analytics, advertising, and infrastructure tools. Scripts like Google Analytics, Tag Manager, Ads, and reCAPTCHA collect behavioral data, manage tag firing, serve targeted ads, and detect bots. Sets persistent cookies to track users and correlate activity across sites.
Google Tag Manager
Google Tag Manager
Google Tag Manager is a tag management system that lets marketers deploy and update analytics and marketing scripts without code changes. The GTM container script loads synchronously in the page head and injects configured tags, triggers, and variables on behalf of other vendors. No data collection of its own — acts as a loader for other scripts.
Google Fonts
Google Fonts
Google Fonts is a free font hosting service that serves hundreds of typeface families via a global CDN. Stylesheets and font files load from fonts.googleapis.com and fonts.gstatic.com to deliver web fonts to visitors. No advertising or tracking functionality is included.
reCAPTCHA
reCAPTCHA
Google reCAPTCHA is a bot detection and spam prevention service protecting web forms, login pages, and checkout flows. Scripts analyze user behavior, mouse movements, and browser fingerprints to distinguish humans from bots. The invisible reCAPTCHA v3 scores interactions without requiring user challenges.
Sign in with Google
Sign in with Google
Sign in with Google is an OAuth-based authentication service that enables users to log into websites using their Google account credentials. Scripts load the Google Identity Services library, display sign-in buttons, and handle token exchange for secure authentication. Stores session tokens and authentication cookies to maintain login state across page visits.

Manage consent for ALTCHA

ConsentStack automatically detects and manages ALTCHA trackers so your site stays compliant with global privacy regulations.