Claim verification notice
How human verification works for new website and Discord claims.
What the check does
When claim verification is enabled for a native server, Tibia Claims uses Cloudflare Turnstile for new website claims or a private Discord-command verification link during that server's configured hours. The browser loads Cloudflare's challenge script and may ask you to complete a check. Cloudflare can process browser and network signals, including your IP address, browser information, and this website's origin and site key, to assess automated traffic.
The browser sends the resulting short-lived challenge token with the claim request. The Tibia Claims backend sends that token to Cloudflare for validation and checks the response before deciding whether to create the claim. We do not send the character, hunting ground, claim times, account ID, Discord ID, or claim contents to Cloudflare in that validation request. A failed or unavailable check does not create a claim; you can try again.
Scope and your information
For a challenged Discord command, the private link opens the human check without another sign-in or a website account. A temporary essential browser cookie holds only a reference to that pending command for up to five minutes; it is removed after a confirmed result. Anyone with the private link could complete only that saved claim, so do not share it. After the check succeeds, the backend automatically submits the original command. The command does not reserve a spawn while you verify, and the current rules and availability still decide the result.
The check applies only to new claims in an enabled window. Claim edits and cancellations do not use this Turnstile widget. A completed check does not guarantee that a player used the form manually.
Tibia Claims does not store the Turnstile token in claim records or application logs. A Discord claim link expires after one minute. To remove its private Discord reply afterward, the bot temporarily stores an encrypted interaction token and deletes it after use or when the retry window ends. Existing claim and security records remain governed by the Privacy Policy. This notice supplements that policy; it does not replace the Terms or ask existing players to accept them again.