Problem/Motivation

The module currently renders alternate branding text in the form when the hide_badge option is enabled. That text says:

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Google notified customers that starting on April 2, 2026, websites using reCAPTCHA should remove references to Google's Privacy Policy and Terms of Use shown in connection with reCAPTCHA.

That means the module's current hide-badge branding text appears to be outdated and potentially non-compliant with Google's updated guidance.

Relevant Google notice/background:

Related existing issues:

Steps to reproduce

  1. Install and configure the recaptcha_v3 module.
  2. Enable hide_badge.
  3. Render a form protected by reCAPTCHA v3.
  4. Observe that the form includes text linking to Google's Privacy Policy and Terms of Service.

Proposed resolution

Stop rendering the old Google Privacy Policy / Terms of Service branding text when hide_badge is enabled, and update documentation accordingly. At minimum, the module should no longer output the outdated notice text after April 2, 2026.

Optionally, since showing additional text on the form as a replacement for the badge is no longer necessary, consider making the hide_badge option default to true on new installations.

Remaining tasks

  • Confirm the exact Google guidance maintainers want to follow.
  • Decide whether this is a bug fix only or a deprecation/removal of hide_badge. (bug fix)
  • Update the rendered output accordingly.
  • Add or update test coverage.
  • Update module documentation and release notes.

User interface changes

Forms using reCAPTCHA v3 with hide_badge enabled will no longer display the current Google Privacy Policy / Terms of Service notice text and links.

API changes

None.

Data model changes

None.

CommentFileSizeAuthor
[Legal Update] Google transitions to data processor for reCAPTCHA starting Apr 2, 2026.pdf238.64 KBjwilson3

Issue fork recaptcha_v3-3580636

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

jwilson3 created an issue. See original summary.

jwilson3’s picture

jwilson3
Primary language English
Location Ecuador
commented

Regarding the open question:

Does Google still permit a hidden badge without the old branding text?

See https://docs.cloud.google.com/recaptcha/docs/faq#hiding-the-badge

The current reCAPTCHA FAQ still says you may hide the badge only if you show the old branding text with Google’s Privacy Policy and Terms of Service links.

But then there is a new note:

Starting April 2, 2026, reCAPTCHA is switching from data controller to data processor. You can still hide the badge, but must remove any references to Google's Terms of Service and Privacy Policy because those will no longer be applicable.

jwilson3’s picture

jwilson3
Primary language English
Location Ecuador
commented
Issue summary: View changes

Since hiding the badge is still allowed, but showing additional text on the form as a replacement for the badge is no longer necessary, I suggest also considering making the hide_badge option default to true on new installations.

Summary updated accordingly.

jwilson3 opened merge request !41

jwilson3’s picture

jwilson3
Primary language English
Location Ecuador
commented

I reviewed the MR's CI Pipeline failures, and all are unrelated to this issue. I'll file a followup.

jwilson3’s picture

jwilson3
Primary language English
Location Ecuador
commented

I created #3580901: Pass GitLab CI pipeline.

jwilson3’s picture

jwilson3
Primary language English
Location Ecuador
commented
Status: Active » Needs review

This needs manual review. The automated tests are failing due to unrelated issues that I just fixed in #3580901: Pass GitLab CI pipeline.

dench0’s picture

dench0
Location Ukraine
commented
Status: Needs review » Reviewed & tested by the community

  • dench0 committed 5afefb2f on 2.0.x authored by jwilson3 
    Issue #3580636: Remove Google branding notice when hiding the badge
dench0’s picture

dench0
Location Ukraine
commented
Status: Reviewed & tested by the community » Fixed

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.

jwilson3’s picture

jwilson3
Primary language English
Location Ecuador
commented

I sincerely thank you, Denis!

dench0’s picture

dench0
Location Ukraine
commented

@jwilson3
Thank you for your work.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.