> In 2014, Google presented the one-click CAPTCHA and later, with reCAPTCHA v3, the “invisible CAPTCHA”. Similar services are offered by other companies like Cloudflare, Akamai, and others. They rely on analyzing everything they know about you and feeding it into a large machine-learning model to compare you with behavior...
> This requires the creation of extensive centralized profiles about the people visiting your site.
Very nice wording to avoid/workaround GDPR/EDPS attention. So, they compare "me" to a "behaviour". Notice the words.. not "my behaviour" to "ProfileType_004 behaviour". Because that would be "profiling" and GDPR don't like profiling! So..
On the second quote, again, they compare something vague to "centralized profiles" (what I wrote as "ProfileType_004" above (or whatever they are called in each vendor). Again, the ether is compared/matched to a profile, so.. they profile us :)
ufff...