Privacy Policy

Last updated: 27 September 2026

This policy explains what personal data Scarnox Labs ("Scarnox", "we") collects when you use the Scarnox website, dashboard and API, why, and what you can do about it. Contact: support@scarnox.io.

What we collect

Account data. Your email address, name, a hash of your password (never the password itself), your API key, and - if you sign in with Google - your Google account ID and the email Google verifies. We record when you accepted these terms.

Task data. For each task you send: the target page URL and site key, the captcha type, the result (solved or failed, error code), the returned token, timing and cost, and whether you used a proxy. Proxy addresses and proxy credentials you send are used for that solve only and are not stored.

Payment data. Amount, currency, payment ID and status from our payment provider. We do not receive or store your wallet keys or card details.

Security data. When you sign up we check the request for automation and abuse: your IP address, whether it belongs to a data centre, VPN or Tor network, and technical signals from your browser (such as screen, timing and feature support). These signup checks are kept for 30 days. We also keep IP-based counters for rate limiting and records of failed logins.

Usage data. Pages visited on our website, with the referring site, browser, operating system and device type, and a one-way hash of your IP address (not the IP itself).

Support and email. Your support tickets and messages, and a log of emails we send you (address, subject, time, delivery status).

Why we use it

• To provide the Service: run your tasks, bill successful solves, show your history and balance (performance of our contract with you).
• To keep the Service safe: stop bots, fraud, abuse of free credit, and attacks (our legitimate interest in protecting the Service and its users).
• To send account emails you need: welcome, payment receipts, password-change and low-balance notices (contract / legitimate interest).
• To send occasional product emails, which you can unsubscribe from with one click (legitimate interest; you can object at any time).
• To comply with legal obligations such as accounting and responding to lawful requests.

We do not sell your personal data and do not use it for third-party advertising.

Who processes it

• Payment provider (NOWPayments) - processes your payments.
• Email provider - delivers our emails.
• Google - if you choose "Continue with Google".
• Hosting and network providers - our servers, and a CDN / firewall provider if one is in front of the site.
• Our solving infrastructure - receives the site key and page URL of each task in order to solve it.

Some of these providers are outside your country. Where the law requires it, we rely on appropriate safeguards for those transfers.

How long we keep it

• Account and task data: while your account is open, then deleted or anonymised within 90 days of closing it, except what we must keep for accounting or legal reasons.
• Signup security checks: 30 days. Server solve logs: 14 days.
• Payment records: as long as accounting law requires.

Your choices and rights

You can see and change your details in the dashboard, rotate your API key, and unsubscribe from product emails from any of them. Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict some processing, and to complain to a data protection authority. To make a request, email support@scarnox.io from your account email.

Cookies and storage

The dashboard keeps your sign-in token in your browser's local storage. We do not use advertising or cross-site tracking cookies. If you use "Continue with Google", Google's own cookies apply to that step.

Children

The Service is not for anyone under 18.

Changes

We may update this policy; the date at the top shows the latest version, and we will tell account holders about significant changes.