The basics
CAPTCHA Both is a thin interface that launches Turnstile and reCAPTCHA simultaneously. When you hit “Verify Human Identity,” the Cloudflare widget renders a challenge and Google collects behavioral data to produce a score. We send the resulting tokens to our `/verify` worker, which then posts them back to the vendor endpoints for validation.
By using this site you agree to the reCAPTCHA terms at cloud.google.com/terms and the Cloudflare terms at cloudflare.com/terms. The tokens we exchange do not contain personally identifiable information beyond the normal headers (user agent, IP) that every HTTP request supplies.
Service responsibilities
We are responsible for:
- Loading the two CAPTCHA widgets reliably and ensuring the refresh flows work when you ask for them.
- Sending the tokens to the worker and returning a simple success/failure response so you can proceed.
- Explaining the limits: we do not store scores, we do not build profiles, and we do not share your usage with partners beyond the vendors mentioned above.
We are not responsible for any decisions Google or Cloudflare make about how they score your interaction. If either service flags the visit as suspicious, we simply report that back to you.
What we do not do
We keep a strict list of “don’ts” so the flow stays crisp:
- We do not log your CAPTCHA scores or reuse them outside this verification cycle.
- We do not accept or process payments, so there is no financial data here.
- We do not install any analytics tags or marketing scripts that track you across sites.
- We do not provide personal data to third parties for advertising or research.
- We do not bypass or alter any Cloudflare or Google behavior—our code simply orchestrates them.
Changes
If this Terms page changes, the date at the top will update and Cloudflare Pages will redeploy the new version. You can always compare the current policy here against the previous ones stored in your git history.