Captcha services

mCaptcha

Open source proof of work captcha service

Open sourceOpen source

mCaptcha is an open source captcha service that you host yourself. Instead of asking visitors to solve a puzzle, it uses proof of work: the browser does a short computation before the form is submitted, which makes automated abuse expensive without bothering people. It is compatible with reCAPTCHA and hCaptcha, so swapping it into an existing form is usually simple. mCaptcha is licensed under the AGPL.

As self-hosted open source software, mCaptcha is not necessarily European, but you can install it on a server in the EU and use it as a European alternative to the American captcha services, with no visitor data leaving your own infrastructure.

Data and operations

Infrastructure and email path

Verified operational dependencies, shown separately from ownership and from the service's core data hosting.

Public website

Airtel

Non-European provider
Observed
A 122.165.244.33 · AS24560

Why this matters

Public DNS routes website visits through Airtel. Visitor IP addresses and request metadata can reach this non-European provider; this does not identify the core service's data location.

Incoming business email

Cloudflare Email Routing

Non-European provider
Observed
MX 31 route2.mx.cloudflare.net · 42 route3.mx.cloudflare.net · 83 route1.mx.cloudflare.net

Why this matters

Published MX records route incoming business email through Cloudflare Email Routing. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.

Authorised outbound email

Cloudflare Email Routing

Non-European provider
Observed
SPF _spf.mx.cloudflare.net

Why this matters

This domain authorises Cloudflare Email Routing to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Public DNS records identify visible providers and routes, not every backend location or private data-region setting.

Infrastructure checked:

More in Captcha services

View all →