Privacy policy.

A platform you use may already know who you are. Our job is to keep that from traveling: a check proves a real human is here and carries nothing about who — so what you’ve entrusted to one place never floats to the next. This says the same thing in longer form.

Last updated · September 2026

What we collect

This site collects very little. We do not run advertising trackers, we do not sell data, and we do not build profiles of individual visitors.

Email address — only if you subscribe to BotShield Direct or ask for a demo. Stored with our newsletter provider and, for demo requests, in our own systems; used to send you what you asked for and nothing else. Unsubscribe in one click, any time.

Messages you send us — anything you write to hello@botshield.ai.

Basic request logs — standard server logs kept for security and reliability.

Site analytics — we use Google Analytics, loaded through Google Tag Manager, and the Apollo.io website-visitor script to understand how the site is used and which organizations visit. These tools set first-party cookies and use your IP address and browser details to count visits and estimate the company or network a visit comes from. They are configured at the company level only: they do not identify you as an individual, and we do not turn on person-level identification. Analytics data is kept by those providers for up to 26 months. To opt out, block cookies or scripts from googletagmanager.com and apollo.io in your browser, or use the Google Analytics opt-out add-on. We also use Cloudflare Web Analytics, which is cookieless and counts page views without identifying anyone.

What we never collect

No biometrics. No identity documents. No advertising or cross-site tracking. No person-level visitor identification. Nothing about your device beyond what a web request and standard analytics carry on their own.

The product

The BotShield Gate verifies that a live human is present at the moment of an action — on the web today, and in the BotShield app. The check tells the platform nothing about who that person is: a platform may already hold what you entrusted to it, and the verdict adds nothing new to float around. Biometric checks happen on the user’s own device and never reach us; platforms receive a signed verdict, never a person. We hold a pseudonymous link to the account you linked — never sold, never shared. And where a service doesn’t need to know who you are at all, you can show up as a handle instead — one per service, none of them you — so the proof of a human travels and your identity doesn’t. Separation of concerns is the architecture, not a policy setting.

The BotShield app

The app (iOS, Android, and app.botshield.ai) holds a little more than this site, and all of it is listed here.

Account — the email address and name your Google or Apple account shares when you sign in. Used only to keep your account and let you sign back in. Processed for us by our sign-in provider.

Your BotShield ID — a passkey that stays on your device. We store the public half and a random identifier for it. The biometric that unlocks it never leaves your phone and never reaches us.

Handles — a separate random identifier for each site or agent you link, so none of them can tie you to another. No name, no email, no identity travels with it.

Verification events — that a verified human confirmed a request, when, and for which handle. Never the biometric, never what you bought beyond the summary you approved.

Push token — so Agents Ask requests reach your phone. Deleted when you remove the device.

Never — no biometrics, no identity documents, no location, no contacts, no advertising identifiers, no cross-site tracking.

Who we share with

Cloudflare (hosting, edge, and cookieless analytics), Google (Tag Manager and Analytics), Apollo.io (organization-level visitor analytics), Resend (the emails we send you), our newsletter provider, our sign-in provider, and the Apple and Google push services that deliver notifications to your phone — each as a processor acting for us, and no one else. We do not sell, rent, or trade personal information. If that ever changes, this page changes first and the list hears about it.

Your choices

Write to hello@botshield.ai and we will tell you what we hold about you, correct it, or delete it. A person answers.

Children

This site is not directed at children under 13, and we do not knowingly collect information from them.

Changes

We will post updates here and change the date above. Material changes go to the list.

This is a plain-language policy, and it is the one we mean. Counsel review is in progress; when it lands, this plain-language version stays alongside it.