Horizontal · Blue
Download SVG
Captcha
Austrian CAPTCHA and bot protection from the Krone group
AustriaEUEU hostedEU controlledHigh non-EU dependencyOperational dependency warning
Relies heavily on non-European providers
Current public evidence shows 3 non-European infrastructure or email dependencies across 3 providers: Akamai and Amazon CloudFront, Microsoft, Stripe Payments Europe. The reviewed operational path is therefore not entirely European.
captcha.eu is a hosted bot-protection service from Captcha GmbH in Vienna. It offers invisible or widget-based checks and integrations for common website platforms without image-selection puzzles.
Its documentation distinguishes the default global CDN from an optional Austria-only route. The end-user notice describes shortened IP addresses, device and browser information, referrers, pointer movement and timing signals, plus a local cookie or storage value. Broad no-data or no-cookie claims should not replace that detail.
Captcha GmbH is registered in Vienna as FN 602312d, at Muthgasse 2, 1190 Vienna, VAT ATU79352727. The official EVI record lists Krone Multimedia GmbH & Co. KG as its sole shareholder. Current Krone statutory disclosures trace the Austrian holding chain and explicitly identify Dr. Christoph Dichand as beneficial owner. This supports European control; directors are not treated as owners. The terms choose Austrian substantive law and the competent court for 1190 Vienna.
Pricing
A trial includes 100 verification requests. Starter costs EUR 8.90/month or EUR 96.12/year for one site and 1,000 monthly requests; Growth EUR 35.90 or EUR 387.72 for five sites and 10,000 requests; Advanced EUR 179.90 or EUR 1,942.92 for ten sites and 100,000 requests. Prices exclude VAT. Unused monthly quotas expire; extra packs expire after 12 months. Checked 16 September 2026.
External verification
EU verification badge
eu-alt.eu independently verified this service's European ownership. Choose a badge style and link it back to the dated evidence on this page.
Evidence last checked:
Horizontal · Black
Download SVG
Embed code
Horizontal · White
Download SVG
Embed code
Compact · Blue
Download SVG
Embed code
Compact · Black
Download SVG
Embed code
Compact · White
Download SVG
Embed code
Data and operations
Infrastructure and email path
Verified operational dependencies, shown separately from ownership and from the service's core data hosting.
Core service hosting
Krone group service on Mediaprint network
Provider control not verified- Observed
- Official docs state Austrian servers behind a default global CDN and provide an optional Austria-only route. at.captcha.at resolved via chat.captcha.eu to 156.58.253.17; IPinfo identifies AS199083 Mediaprint and Vienna. This is an endpoint observation, not proof of all backup or customer-account data locations.
Public website
Akamai and Amazon CloudFront
US-controlled cloud- Observed
- On 16 September 2026 at 19:51 UTC, www resolved through w19.captcha.eu, krone.at.edgekey.net and e25190.e12.akamaiedge.net. The apex returned 108.156.60.128/.13/.116/.113; IPinfo identifies an Amsterdam CloudFront node in AS16509. A global front door is distinct from Austrian origin hosting.
Why this matters
This public website route ends on Akamai and Amazon CloudFront, whose European seller is wholly owned by Amazon.com, Inc. An EU region can provide European data residency but remains under US ultimate ownership. DNS does not reveal the AWS region, the core service's host, or use of the separately operated AWS European Sovereign Cloud.
Incoming business email
Microsoft 365
Non-European provider- Observed
- MX 0 captcha-eu.mail.protection.outlook.com
- Evidence
- Current daily MX lookup ↗
Why this matters
Published MX records route incoming business email through Microsoft 365. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.
Authorised outbound email
Group mail, SendGrid, Amazon SES, Microsoft and HubSpot
Provider control not verified- Observed
- SPF authorizes group IP ranges plus sendgrid.net, amazonses.com, spf.protection.outlook.com and 147285318.spf02.hubspotemail.net. Authorization does not prove actual routing or sender volume.
- Evidence
- Observed SPF ↗
Payment processing
Stripe Payments Europe
Non-European provider- Observed
- Customer privacy names Stripe Payments Europe in Dublin as a separate controller for payments. Stripe group control is distinct from this entity's address and from challenge processing.
Why this matters
When this payment method is used, Stripe Payments Europe processes payment and billing data. This role alone does not establish access to the service's other customer content.
Supporting services
Group operations, Hetzner backups and website vendors
Provider control not verified- Observed
- Current notices name Krone Multimedia for operations and Google/Didomi for website functions. The historical March 2024 DPA copy lists Krone Multimedia for hosting and operations, Mediaprint for bookkeeping, and Hetzner as a backup data centre without a region. A current signed DPA and exhaustive global-CDN transfer schedule were not obtained.
Czech Republic
Open source
Switzerland
