GDPR

Hey, maybe this answer helps: https://community.cloudflare.com/t/turnstile-gdpr/436978

Cite:

(…) GDPR explicitly allows using technical information where reasonably necessary. For example you don’t need to ask for cookie permissions if you only ever use a session id cookie.
Safety and security are considered a technical necessity to run a site. So using available technical information for ensure s+s is within reasonable use is permissable. (…) Turnstile is very like within the bounds of permissive use of technical measures for safety and security. (…)

Thank you, but that is still a bit vague. I’d really like to hear from the plugin author to know exactly what they do and do not track so that it can be indicated in the privacy policy accurately.

That’s not something the plugin author knows. You need to ask Cloudflare.

The link below is a Cloudflare page that describes some of the privacy concerns they considered when making Turnstile.

https://blog.cloudflare.com/turnstile-private-captcha-alternative/

It’s not a technical explanation of what private data they may or may not capture with Turnstile. But they do work with device makers to have the devices tell Cloudflare if the user is a human or not. And they claim not to use or look at any cookies.

Turnstile is still in betta. Perhaps when it is out of betta Cloudflare will have more specific details as to whether Turnstile complies with GDPR or not.

Thank you!

You’re welcome. And I found this discussion about Turnstile and GDPR:

https://community.cloudflare.com/t/turnstile-gdpr/436978

Great, much appreciated!

Hi @prcm777,

As others have mentioned, you would need to ask Cloudflare what data they track/store on there end. This is not something we have any control over.

Check out this thread on Cloudflare’s forums: https://community.cloudflare.com/t/turnstile-gdpr/436978

All the best!

• This reply was modified 1 year, 10 months ago by Elliot Sowersby / RelyWP.