1. Overview
Katcha provides invisible bot detection for websites. This policy explains what limited data passes through Katcha when it is running on a site, and why.
2. What we process
To score whether a session is likely human, Katcha reads signals such as interaction timing, pointer and keyboard behaviour, and basic device or browser characteristics. These signals produce a verification decision and are not linked to a persistent visitor identity.
3. Legal basis
We process this data under legitimate interest (GDPR Art. 6(1)(f)): our customers' and their visitors' shared interest in keeping a site free of automated abuse. Because Katcha sets no cookies and performs no cross-site tracking, no cookie consent is required for this processing.
4. Retention
Signals are retained only as long as needed to compute a decision and support short-term abuse investigation, typically a matter of days. Aggregated, non-identifying statistics may be kept longer to operate and improve the service.
5. Where data is processed
All processing takes place on infrastructure located in the Netherlands and EU. We do not transfer data outside the European Economic Area.
6. Sub-processors
We rely on EU-based infrastructure providers to host Katcha. We do not share data for advertising or analytics, and we do not sell data under any circumstances.
7. Your rights
Under the GDPR, you have the right to access, correct, delete, restrict, or port data concerning you, and to object to processing. Because Katcha does not identify individual visitors, most requests concern customer account data.
8. Cookies
Katcha does not set cookies or equivalent tracking technology, on any plan.
This website, katcha.eu, uses Google Analytics to count visits, but only if you accept analytics cookies in the banner. If you reject, nothing is loaded. You can change your choice at any time with Cookie settings in the footer.
We also count visits with Umami Analytics. Umami sets no cookies, stores nothing on your device and does not track you across sites.
9. Children's privacy
Katcha is a technical service used by website operators and is not directed at children. It does not knowingly collect data intended to identify a child.
10. Changes to this policy
We will update the date at the top of this page when the policy changes and notify active customers of material changes.
11. Contact
Questions about this policy or a request relating to your data:
[email protected]