Effective date: August 29, 2026
This document is a supplement to the general Kiges Privacy Policy and regulates data processing issues specific to the Kiges Shield service — a service included with Kiges Uptime that provides CAPTCHA, cookie consent management, and GDPR consent checks for the User's websites.
1. General Provisions
1.1. This document supplements the general Kiges Privacy Policy and applies in conjunction with it. In case of discrepancies between the documents regarding Kiges Shield, this document prevails.
1.2. Use of the Kiges Shield service implies the User's consent to the terms of this document, the general Kiges Privacy Policy, and the Kiges Shield Terms of Service.
1.3. Terms used in this document are applied in the meanings defined in the general Kiges Privacy Policy and the Kiges Shield Terms of Service.
1.4. Kiges Shield is provided as part of a Kiges Uptime subscription. Data processing related to billing and account management is governed by the Kiges Uptime Privacy and Data document and the general Kiges Privacy Policy.
2. Data Processed within Kiges Shield
2.1. To ensure the functionality of the Kiges Shield service, the following categories of data are processed:
2.1.1. Account data: email address, password (hashed), User's name, notification settings (managed within the Kiges Uptime account).
2.1.2. Site configuration data: list of websites (domains) on which Shield is enabled, CAPTCHA settings (type, difficulty, trigger conditions), cookie consent banner settings (text, categories of cookies, position, colors), GDPR consent check settings, localization settings, integration keys and tokens.
2.1.3. End-user (visitor) data: IP address (may be truncated or anonymized depending on settings), browser and device information (User-Agent, screen resolution, language), CAPTCHA challenge and solution data, behavioral signals used for bot detection (mouse movements, keystroke timing, interaction events), cookie consent choices of the visitor, GDPR consent records (what was consented to, when, and how the visitor can withdraw consent), date and time of requests.
2.1.4. Analytics data: number of CAPTCHA challenges issued and solved, share of blocked or suspicious requests, cookie consent acceptance and rejection rates by category, statistics on GDPR consent, geolocation (at country level, if available).
2.1.5. Payment data: information about the pricing plan, payment history, bank card details (processed by the payment system; Kiges Shield does not store full bank card details). Payment data is processed within the Kiges Uptime subscription.
2.2. Kiges Shield does not request or process special categories of personal data (information about health, racial or ethnic origin, political opinions, religious beliefs, etc.).
2.3. Kiges Shield processes the minimum amount of end-user data necessary to provide the CAPTCHA, cookie consent, and GDPR consent check functionality. The User can configure the granularity of data collection within the limits determined by the service settings and the Pricing Plan.
3. Purposes of Data Processing
3.1. Data is processed exclusively for the following purposes:
3.1.1. Ensuring service functionality — issuing and verifying CAPTCHA challenges, displaying the cookie consent banner, recording GDPR consent.
3.1.2. Bot and abuse protection — analyzing behavioral signals and other data to distinguish humans from automated bots and block malicious traffic.
3.1.3. Cookie consent management — recording and storing visitors' choices regarding the categories of cookies they accept or reject.
3.1.4. GDPR compliance support — recording evidence of visitor consent for the User's compliance with applicable data protection legislation.
3.1.5. Analytics — collecting and processing statistics to provide the User with analytical reports on traffic, blocked requests, and consent rates.
3.1.6. Technical support — maintaining the operability of the service, preventing abuse and technical failures.
3.1.7. Billing — processing payments and managing subscriptions (within the Kiges Uptime subscription).
4. CAPTCHA and Bot Detection
4.1. When a visitor accesses a page on the User's website where Shield is enabled, Kiges Shield may issue a CAPTCHA challenge or perform an invisible bot-detection check.
4.2. To perform the check, Kiges Shield processes the visitor's IP address, browser and device information, and behavioral signals. The IP address may be truncated or anonymized in accordance with the User's settings.
4.3. Kiges Shield stores the result of the check (passed/failed, suspicion score) for the period necessary to provide analytics and ensure the functioning of the protection, after which it may be aggregated or deleted.
4.4. Kiges Shield does not guarantee complete blocking of bots or malicious traffic. The User acknowledges that no automated protection system is absolute.
4.5. The User is responsible for the legitimate use of CAPTCHA on their websites and for complying with applicable legislation, including accessibility requirements.
5. Cookie Consent Management
5.1. Kiges Shield displays a cookie consent banner on the User's website in accordance with the User's settings (text, categories of cookies, appearance).
5.2. When a visitor makes a choice (accepts, rejects, or customizes cookie categories), Kiges Shield records the visitor's consent or refusal, the date and time, the categories selected, and the identifier necessary to recognize the visitor on subsequent visits.
5.3. Consent records are stored for the period necessary to comply with applicable data protection legislation and to allow the visitor to withdraw or change their consent.
5.4. Kiges Shield provides the visitor with the ability to reopen the consent banner and change their choice at any time.
5.5. The User is responsible for the accuracy of the cookie categories declared in the banner and for ensuring that the actual cookies used on their website correspond to the declared categories.
5.6. Kiges Shield is not liable for the User's non-compliance with cookie legislation, including incorrect categorization of cookies or use of cookies without consent.
6. GDPR Consent Records
6.1. Kiges Shield records evidence of visitor consent for the purpose of supporting the User's compliance with GDPR and other applicable data protection legislation.
6.2. The consent record includes: what the visitor consented to, the date and time of consent, the method of obtaining consent, the version of the consent banner, and the identifier of the visitor.
6.3. The User can access and export consent records through the Kiges Shield interface for the purpose of demonstrating compliance to supervisory authorities.
6.4. Consent records are stored for the period determined by applicable legislation or by the User's settings within the limits of the Pricing Plan.
6.5. Kiges Shield is a tool that supports compliance but does not constitute legal advice and does not guarantee the User's compliance with legislation. The User is responsible for their own compliance with GDPR and other applicable legislation.
7. End Users (Visitors) and Their Data
7.1. End users of the Kiges Shield service are visitors to the User's websites on which Shield is enabled.
7.2. Kiges Shield processes end-user data on the basis of the legitimate interests of the User (protection against bots and abuse) and the User's compliance with data protection legislation (cookie and GDPR consent).
7.3. The User is the controller of end-user data processed through Kiges Shield on their websites. Kiges Shield acts as a processor on behalf of the User.
7.4. The User is responsible for informing visitors about the processing of their data, for having a privacy policy on their website, and for complying with obligations toward end users under applicable legislation.
7.5. Kiges Shield is not liable for the User's failure to fulfill obligations toward end users of their websites.
8. Data Storage and Protection
8.1. End-user data (CAPTCHA check results, consent records, behavioral signals) is stored for the period necessary to provide the service and comply with applicable legislation, after which it is deleted or aggregated.
8.2. Kiges Shield takes technical and organizational measures to protect data, including encrypting data transmission via HTTPS, encrypting integration keys and tokens, restricting employee access to data, and regular backups.
8.3. In the event of a data security breach, Kiges Shield takes measures to eliminate the breach and notifies affected Users within a reasonable time.
9. Data Sharing with Third Parties
9.1. Kiges Shield does not share Users' personal data or end-user data with third parties, except as required by the legislation of the Republic of Serbia.
9.2. Kiges Shield may use the services of third-party providers (hosting, analytics, CDN) to ensure the operation of the service. Data sharing with such providers is carried out under confidentiality agreements.
9.3. Kiges Shield may share aggregated and anonymized statistical data with third parties for the purpose of analysis and service improvement.
9.4. Kiges Shield does not sell end-user data or use it for advertising purposes.
10. User Rights
10.1. The User has the right to:
10.1.1. Request information about the personal data processed by the Kiges Shield service.
10.1.2. Demand clarification, blocking, or destruction of their personal data if it is incomplete, outdated, inaccurate, or unlawfully obtained.
10.1.3. Delete their Shield configuration and all associated data, including consent records and analytics.
10.1.4. Withdraw consent to data processing by deleting their account (within Kiges Uptime).
10.2. Upon account deletion, Kiges Shield deletes the User's data within a reasonable time, except for data that must be retained in accordance with the legislation of the Republic of Serbia.
11. End-User Rights
11.1. End users (visitors to the User's websites) have the right to access, rectify, erase, and port their personal data, as well as to withdraw consent, by contacting the User (the controller) through the contact details provided on the User's website.
11.2. Kiges Shield provides the User with tools to fulfill end-user requests (export and deletion of consent records and associated data).
11.3. Kiges Shield does not respond directly to end-user requests, as it acts as a processor. All such requests should be directed to the User.
12. Data Deletion
12.1. The User can delete their Shield configuration, consent records, and analytics at any time through the service interface.
12.2. When Shield is disabled for a website, Kiges Shield deletes the associated end-user data within a reasonable time, except for data that must be retained in accordance with applicable legislation.
12.3. Kiges Shield reserves the right to delete data of inactive accounts after 12 (twelve) months from the last User activity.
13. Cookies and Analytics
13.1. Kiges Shield uses its own cookies strictly to the extent necessary to provide the service: storing the visitor's cookie consent choice, recognizing the visitor for the purpose of not re-displaying the CAPTCHA and consent banner.
13.2. The cookies used by Kiges Shield on the User's websites are categorized in the consent banner in accordance with the User's settings and are placed only after receiving the visitor's consent, except for strictly necessary cookies.
13.3. Kiges Shield may collect aggregated anonymous statistics on the operation of the service to improve it.
13.4. On the Kiges Shield management panel (within the Kiges Uptime account), cookies are used to ensure the operation of authorization and remember User settings.
14. Additional Conditions
14.1. Kiges Shield reserves the right to make changes to this document. The User undertakes to independently monitor the current version.
14.2. All questions regarding data processing in the Kiges Shield service should be sent to: info@kiges.cc.
14.3. This document is an integral part of the Kiges Shield Terms of Service dated August 29, 2026 and the general Kiges Privacy Policy, available at: https://help.kiges.cc/en/documents-rules/kiges-privacy-policy?app=kiges.