The Rule of Thumb: GDPR, Plugins, and Understanding Your Data – Interview with Helmut Januschka

We explore various aspects of compliance, and legal challenges. In this episode of the Osom to Know Podcast, Helmut Januschka shares the story behind Captcha.EU, a GDPR‑compliant alternative to traditional CAPTCHA services, and reflects on why simplicity is often the strongest foundation for security. He shares his personal experience of navigating GDPR compliance, including his decision to not use Google Analytics for his captcha website.

➡️ Helmut Januschka, Head of Software Engineering @krone_at Austrian biggest private news publisher, is an expert in website protection and security. He understands the risks that businesses face when their websites are targeted by bots, leading to potential loss of business.

GDPR in the nutshell

When GDPR came into effect, businesses across Europe were forced to rethink how they collect and process user data. For Helmut Januschka, Head of Software Engineering at Austria’s largest private news publisher Krone AT, the new regulation wasn’t a setback – it was the catalyst for creating a safer, more privacy‑minded web.

“If you don’t know why you need the data, don’t save it.”

That principle became the driving force behind the Captcha.EU project and Helmut’s approach to data handling: only collect what’s necessary, nothing more. It’s a simple rule that helps companies reduce risk, cut down on maintenance overhead, and build user trust by design.

From Regulatory Burden to Product Innovation

When GDPR forced Krone AT to remove U.S.-based CAPTCHA providers, the team faced a dilemma. Theyimmediately saw increases in ghost signups, and fake voting results. Helmut and his team built a proof of concept based on academic white papers from MIT and Stanford. The internal test worked so well that they expanded it across the organization – and later turned it into a commercial product.

It worked so good we were shocked at first. After a year we thought: okay, this might be a good product to sell.

Captcha.EU is now a fully GDPR‑compliant service, with native WordPress integration and growing adoption across Europe.

UX Without the CAPTCHA Friction

Unlike conventional CAPTCHA tools that force users to click on buses or type distorted letters, Captcha.EU operates invisibly in the background. This was a deliberate UX decision, and this philosophy shaped an invisible, user‑friendly solution that blends compliance, accessibility, and security without undermining the user experience. The technology relies on behavior‑based models rather than visual puzzles, ensuring privacy while maintaining accuracy.

Plugins and the Principle of Necessity

Helmut is straightforward when it comes to plugin management and GDPR safety. During the conversation, he emphasized how easily third‑party tools can create vulnerabilities:

You really have to understand what your plugins do. Many of them use APIs or external services that might not be compliant. Don’t install what you don’t need.

His advice applies not only to developers but also to site owners: every additional plugin expands your legal and technical surface. By focusing on essential functionality, you stay in control and minimize the risk of non‑compliance.

What Legal Readiness Really Means

To make Captcha.EU fully compliant, Helmut’s team worked closely with legal experts to document every step of the process – from how data was stored to where it was processed. Their internal checklist included avoiding U.S. data processors, maintaining full audit trails, and building transparency into the dashboard. For Helmut, legal readiness isn’t a one‑time milestone – it’s a continuous habit of verifying and documenting how your systems behave.

Building Trust in a Distrustful Era

Today’s users are skeptical, and rightfully so. They want to know their data is safe, local, and handled responsibly. Helmut’s project is a reminder that trust isn’t won through slogans but through technical integrity.

At Osom Studio, we see this every day: when brands handle privacy seriously, they gain not just compliance but customer loyalty. Captcha.EU’s success shows that GDPR compliance can be more than a box‑checking exercise—it can become a competitive edge.

Final Thoughts: Do Less, But Do It Right

Helmut’s closing thoughts capture the essence of the conversation:

“Old tech is not always bad tech. Sometimes using what’s proven and simple is exactly what keeps you safe.”

In other words – less can truly be more. By reducing complexity and focusing on purpose‑driven tools, you create a safer, faster, and more trustworthy digital environment. When brands handle privacy seriously, they gain not just compliance but customer loyalty.

Full conversation with Helmut Januschka

GDPR Compliance isn’t optional, but it doesn’t have to be overwhelming.

Want to hear the full conversation with Helmut Januschka? Check out the latest 🎙️ Osom to Know podcast.

You can also watch us on our YouTube – don’t forget to hit subscribe! 📩