Private by design and temporary by default

Who operates the service

Probably Human operates this service. Privacy questions and deletion requests may be sent to help@probably-human.com.

Information we process

• Names or usernames entered for the requester and recipient
• Recorded video, audio, and a captured preview frame
• The challenge shown for each attempt and summary results from on-device checks
• Request, prompt, recording, receipt, review, submission, and expiration times
• Observed IP address, forwarded network headers, browser headers, locale, timezone, screen size, and camera settings
• Consent timestamp and the version of the recording disclosure accepted for the Human Check
• An optional requester email address used only to send a completion notification
• Basic service events such as creating, opening, recording, submitting, sharing, and reviewing a check
• On public pages only, aggregate page, referrer, country, browser, operating-system, and performance information collected by Cloudflare Web Analytics
• Private review links stored locally in the requester’s browser so the requester can return without an account

Camera models and biometric-related processing

Face and hand models run in the recipient’s browser to estimate framing and whether a requested action may have occurred. Face and hand analysis is used to evaluate a requested action, not to recognize or identify a person. The current service stores summary results, not raw facial landmarks, hand landmarks, voiceprints, a reusable face template, or a database used to identify or match people. The submitted video and audio may still be considered sensitive or biometric-related information under some laws because identifying information could potentially be derived from them.

Why we process it

We use the information to create and deliver the private request, record and display the response, add an integrity watermark, issue short-lived challenges, detect basic activity, send an optional completion email, reduce simple misuse, show capture context, understand aggregate use and public-page performance, troubleshoot failures, investigate abuse, and delete expired material.

Consent

Before camera access, the recipient must expressly confirm that they are an adult and consent to recording, temporary storage, automated signal analysis, capture details, watermarking, and disclosure of every completed attempt after final confirmation. Consent is requested once for that Human Check in the current browser session, not before every attempt. The service records the acceptance time and disclosure version. Do not continue if you do not agree.

Who can view a response

Attempts are not public. They become available through the private review link only after the recipient sends final confirmation. Anyone who obtains that link may be able to view the response, so the link must be treated as a secret.

Retention and deletion

Human Checks and their media are designed to expire 24 hours after creation. Production deployments must run scheduled deletion rather than relying only on page traffic. Security logs, abuse records, and aggregated metrics may be retained longer when reasonably necessary for safety, reliability, fraud prevention, or legal compliance.

Watermarks

Recorded videos and captured preview frames include a visible Probably Human watermark, attempt number, short challenge code, and capture time. The watermark is intended to preserve context if media is copied or screen-recorded. It is not a cryptographic guarantee and may be cropped or altered by someone with access to the media.

Legal basis

Where data-protection law requires a legal basis, recording and automated action analysis are based primarily on the recipient’s explicit consent. Contractual necessity and legitimate interests may support limited processing needed to deliver the requested service, secure private links, prevent abuse, and keep audit records. You may stop before final confirmation. Completed attempts remain temporarily stored until automatic expiration or an earlier deletion request; deletion requests may be sent to help@probably-human.com.

Service providers and international processing

We may use hosting, database, private object-storage, network, security, email, analytics, and monitoring providers, including Cloudflare for public-page web analytics. They process information on our behalf and may operate in countries other than the country where you live.

Sale, advertising, and public profiles

We do not sell Human Check recordings, use them to build a public facial database, or create a permanent public verification profile. This service does not use submitted recordings to train face-recognition, voice-recognition, generative AI, or advertising models. This MVP does not use submitted recordings for behavioral advertising.

Local storage and cookies

The service stores recent private review links in the requester’s browser storage. Cloudflare Web Analytics does not use cookies or local storage to collect its usage metrics, and its beacon is not loaded on private challenge, review, or submission routes. Essential hosting or security providers may still set technical cookies or similar identifiers. The current MVP does not include advertising trackers.

Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, or a copy of information, and to object or withdraw consent. Contact help@probably-human.com and include the private link or request identifier when available. We may need enough information to confirm that you are authorized to make the request.

Security and incidents

We use access controls, short-lived private links, encryption in transit, restricted storage, and automatic deletion. No online service can guarantee absolute security. If we confirm a security incident that requires notice under applicable law, we will provide legally required notices and take reasonable containment and remediation steps.

Children

The service is not intended for anyone under 18. Do not create or complete a check involving a minor.