Questions

Straight answers

If yours is not here, ask us — we would rather answer it than have you guess.

Do I need a Google account?

No. The Math and Question challenges run entirely on your own site with no signup and no external service. If you would rather use a managed provider, Cloudflare Turnstile is free and needs no Google account either.

Will it work with my page caching plugin?

Yes, by design. CaptchaFlow never puts visitor-specific data into your page HTML, so cached pages stay correct for every visitor. The challenge is fetched by the browser with caching disabled, and the diagnostics screen confirms it is working through your cache.

What happens if the CAPTCHA provider goes down?

Your forms keep working. CaptchaFlow fails open by default: if the provider cannot be reached, submissions are still checked by the honeypot, timing and content checks rather than everyone being locked out. You can switch that off if you would rather fail closed.

What data do you collect about my visitors?

None reaches us. There is no telemetry, no phoning home and no account. Verification events are logged in your own database for the retention period you choose. IP addresses are shortened to their network before storage, and email addresses are kept only as one-way hashes.

Does it slow my site down?

The public script is 2.5 KB gzipped and loads only on pages that actually contain a protected form. Log writes are deferred until after the response has been sent, so verification adds no database round trips to the submit path.

My form plugin is not on your list.

The generic adapter protects any form by CSS selector, including custom and hand-built ones. There is also a documented PHP SDK and a full hooks reference if you would rather wire it in yourself.

Is it GDPR-friendly?

It is built to be. Self-hosted challenges send nothing anywhere. CaptchaFlow also writes suggested privacy-policy wording describing your actual configuration, and plugs into WordPress’s own export and erase tools so a visitor request covers the spam log too.

Does it work on multisite?

Yes. Pro adds network-wide settings so one configuration can cover every site on the network.

Can I try Pro before buying?

Yes — every Pro plan includes a 14-day trial with no card required.

What happens when my licence expires?

Your site stays protected. An expired licence stops new updates and Pro support, but nothing switches off and no form starts letting spam through.

Still stuck? Email [email protected], and attach the diagnostics report from Tools — it contains no keys or secrets and saves a round trip.