Acceptable Use Policy
Version 1.0, last changed 30 September 2026.
ZeroCaptcha is for developers who automate, test or collect data on sites they are allowed to access. This policy is part of the Terms of Service: by creating an account you agree to it, and you are responsible for every task your keys create.
What you may do
- Test, monitor or automate sites you own or run.
- Automate sites whose owner allows it, in their terms or in writing.
- Run security or quality tests you are authorized to run.
- Collect public data where the law and the site's terms let you.
What you may not do
- Solve challenges on a site you are not allowed to automate, or whose owner has told you to stop.
- Take over accounts, test stolen passwords or card numbers, or commit fraud of any kind.
- Create accounts, reviews, votes or messages in bulk to deceive a site or its users, or send spam.
- Get into systems or data you have no right to, such as a bank's, a government's or a health service's.
- Overload, attack or disrupt a site, or help anyone else do so.
- Break any law that applies to you or to the site.
- Attack ZeroCaptcha itself, get around its limits, or share your keys with people who are not bound by these terms.
How we handle abuse
Nothing blocks a task or an account on its own. A person on our staff reviews each report, and checks our logs of the tasks involved: the page, its domain, when it was asked for and from where. Then they may:
- add a domain to our blocklist, after which every task for that domain, or anything under it, is refused before any solving, at no charge;
- suspend an account, after which its keys are refused and it cannot create tasks, keys or top-ups; or
- decide that nothing needs to change.
Each such action is recorded with its reason and the staff member who took it. If your account is suspended and you think we got it wrong, write to support@zerocaptcha.io.
Reporting abuse
To report tasks you think break this policy, use the abuse report form, or email abuse@zerocaptcha.io, with the site, the times, and anything that identifies the requests, such as a task ID. We may ask you for more, and tell you what we did where we can.
If you run a site
If you don't want ZeroCaptcha used against your site, ask us to opt it out. Our staff check that you speak for the domain, then add it to the blocklist, or tell you why not.