====== CAPTCHA ======

With the question type "Captcha", SoSci Survey allows you to include services that prevent, or at least impede, a program (bot) from filling out the questionnaire automatically. Different solutions are available:

  * An **arithmetic problem** is implemented directly in SoSci Survey
    * Advantages: No privacy issues whatsoever, accessible
    * Disadvantages: Very weak protection against bots (only little additional effort in bot development)
  * **reCaptcha**
    * Advantages: State-of-the-art protection
    * Disadvantages: Privacy challenges, registration with the provider required
  * **Friendly Captcha**
    * Advantages: State-of-the-art protection, well compatible with EU data protection (GDPR)
    * Disadvantages: Additional costs charged by the provider

Using a bot to automatically fill out questionnaires involves additional effort (as of 2026). In scientific surveys, it is therefore unlikely that such attacks on the data collection occur frequently. However, prize draws or other incentives, for example, may be a motivation. Also, if respondents are recruited via service providers and are paid for completing the questionnaire, participants could be motivated to use bots.

Classic captchas (e.g., recognizing distorted letters or the arithmetic problem integrated in SoSci Survey) hardly pose a challenge for AI models anymore. Moreover, it is conceivable that paid participants solve captchas manually in the course of a questionnaire.

Therefore, a captcha generally does not provide reliable protection against automated completion. However, there is no guarantee either that humans fill out a questionnaire sensibly and truthfully. In some cases, data quality issues can be identified by means of meta data, but there is no guarantee for that either. The risk of false data generally is part of the survey method, and for online surveys the risk is higher than for printed questionnaires.


===== Arithmetic Problem =====

If you select the arithmetic problem in the captcha element, SoSci Survey displays such a problem in place of the element, and the respondents can only continue if they have entered the correct solution.

This measure impedes mass completion by submitting prepared server requests, but it can be circumvented with moderate additional effort.


===== reCaptcha =====

With reCaptcha, files are loaded from servers outside the EU (typically USA), and the IP address of the respondent is transmitted to the provider (Google) in the process. The service is offered free of charge, and it has to be assumed that the provider can collect and exploit information about the visitors of a website through the service.

In 2026, the service was reorganized with regard to data protection. You as the project manager or your institution are the controller of the data processing within the meaning of the GDPR. reCaptcha is a subcontractor. To avoid multi-level commissioned data processing, you must register [[https://cloud.google.com/security/products/recaptcha|reCaptcha]] yourself via a Google account and (!) take care of the data protection tasks for using reCaptcha (e.g., documentation, concluding a data processing agreement via the reCaptcha website).

  * When registering a new reCaptcha, you can specify whether and how it appears in the questionnaire.
  * After the registration, two keys (character strings) are displayed, a website key and a secret key. Note down both keys.
  * In SoSci Survey, create a question of the question type //Captcha//, select the option "reCaptcha" for the //Captcha type//, and enter both keys.
  * Under **Compose Questionnaire**, drag the captcha question to the position in the questionnaire where the captcha shall appear.


===== Friendly Captcha =====

The provider Friendly Captcha is generally regarded as a privacy-friendly solution. However, as the user data is not exploited or sold, using the service incurs [[https://friendlycaptcha.com/de/#pricing|costs]].

To use Friendly Captcha, first register a user account at [[https://friendlycaptcha.com|Friendly Captcha]] (30 days free trial, subject to a charge thereafter).

  * Under **Applications**, click **+ New Application**
  * You will then be asked for a //Use Case//, where you can select "Survey".
  * After a few clicks, you receive a //Sitekey//. Note it down.
  * Under **Keys**, select **+ New API Key**. Note down the API key as well.
  * In SoSci Survey, create a question of the question type //Captcha//, select the option "Friendly Captcha" for the //Captcha type//, and enter both keys.
  * Under **Compose Questionnaire**, drag the captcha question to the position in the questionnaire where the captcha shall appear.

**Note:** Currently (as of 2026), Friendly Captcha guarantees the restriction of data processing to servers within the EU only in the Advanced plan, which costs many times as much as the Starter plan. Please clarify possible implications with your data protection officer.

===== Other Providers =====

If you would like to use another provider, you can include the necessary HTML code in the questionnaire as a **text** (display mode: HTML code). This HTML code usually contains a public API key of the provider.

By means of ''readGET()'', you can read form elements created by the captcha, and by means of ''[[:en:create:functions:sendjson|sendJSON()]]'' you can check whether the response was correct. A secret API key of the provider is required for this check.

**Note:** Including external scripts in the questionnaire may result in data protection challenges (for example, commissioned data processing according to the GDPR). Ask your data protection officer for details.