Google reCAPTCHA

Functional

Anti-bot CAPTCHA from Google.

How to block it until consent

reCAPTCHA v3 loads on every page and sets the _GRECAPTCHA cookie plus pings Google. The CNIL (France) and DPC-aligned guidance treats this as requiring consent except on forms that actively need bot protection. Prefer Cloudflare Turnstile where possible.

Detection signals

Host domains

recaptcha.net
google.com
gstatic.com

Cookies set

_GRECAPTCHA

Request patterns

/recaptcha/api.js
/recaptcha/api2/
/recaptcha/enterprise.js

Privacy-friendly alternatives

Cloudflare Turnstile

Categorisation follows common EU/DPC guidance. Your specific deployment may change the category (e.g. Stripe on a checkout page vs. a marketing page).