Hacker News Reader

Hahaha, so EU service providers can't protect their website using Google reCAPTCHA because it'd likely need user's consent and they're not allowed to restrict their offering in case a user doesn't consent. So, bots simply deny consent and send the form without captcha :'-D

Did I get that right?

That's nuts.

View on HN

Lots of alternatives who claim to be GDPR compliant though.

> and they're not allowed to restrict their offering in case a user doesn't consent.

French newspapers don't seem to agree with your interpretation of GDPR, as you are almost always facing a “consent or pay”-wall…

I would say that you need to call a phone number to verify you as a user if you don't consent to captcha. And then that number is a voicemail leave your number we will call you back. And then we have a backlog so it takes us a while to call back. I don't think that's illegal.

Reply on news.ycombinator.com