prepared to get penalized by recaptcha for not having it enabled.
Link for the lazy / curious: https://www.hcaptcha.com/
(I am completely unaffiliated with them, and I can't really even verify whether or not hCaptcha is any good, although it did seem like it was rather decent to me and no more difficult not easier than the average reCAPTCHA)
ReCaptcha already appears to have some grudge against me, presumably by virtue of running Firefox and comprehensive ad-blocking, so blocking yet another google thing isn't going to make my life substantially worse.
I do get recaptcha all the time in Safari on iOS despite being logged into Google there too, not sure what that’s about.
On mobile: * NextDNS (same app vpn setup on iOS) with aggressive blocks enabled * Safari content blocker for anything that gets missed.
Every time I get a recaptcha, it invariably turns into a multi-round affair.
OTOH when I see reCaptcha-wanted websites I'm mostly inclined to just bounce. There has to be a really compelling use-case to propel me to go to all the bother.
https://wiki.mozilla.org/Privacy/Privacy_Task_Force/firefox_...
Privacy comes with a price.
Often site-specific form validation is more than adequate to prevent bot registrations. Until you hit the level of "people are scripting for your site specifically" level, rudimentary data validation will catch almost every bot.
Well honestly, "1-person hobby project" doesn't really have "customer service". Though I work hard to help anyone with honest feature requests and issues, there's still no SLO on any of this.
I have unfortunately hit people scripting for my site directly, which is where I had to rely on Captcha. It's unfortunate but bad actors have honestly ruined so much of the internet...