FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Security

v4Guard Checkpoint

EssentialOfficial website

v4Guard Checkpoint is a security and bot mitigation service. This page explains its cookies, your GDPR and ePrivacy obligations, data transfers and how to deploy it with valid consent.

Block v4Guard Checkpoint until consentScan my site
Overview

What does v4Guard Checkpoint do?

What v4Guard Checkpoint is and how it works

v4Guard Checkpoint is a security and bot mitigation service operated by v4Guard. It sits in front of your website to filter malicious traffic, absorb denial of service attacks and challenge suspicious visitors before they reach your origin server.

What data and cookies v4Guard Checkpoint processes

To tell humans and bots apart, v4Guard Checkpoint processes connection metadata such as the visitor IP address, the user agent and request patterns, and it stores a strictly necessary cookie that records the result of a security challenge.

GDPR and ePrivacy implications

Filtering traffic means processing IP addresses, which are personal data under the GDPR, so you need a lawful basis. Most operators rely on legitimate interest in network and information security, recognised in Recital 49 GDPR.

Do you need consent

The cookies v4Guard Checkpoint needs are strictly necessary for the service to work, so they are exempt from prior consent under the ePrivacy rules, but you must still inform visitors about them.

International data transfers

The v4Guard Checkpoint challenge is served from a global network that includes nodes outside the European Economic Area, so an IP address may be processed in a third country. Map this transfer, identify the safeguard you rely on such as an adequacy decision or Standard Contractual Clauses, and document it in your records of processing.

How to stay compliant with v4Guard Checkpoint

Configure v4Guard Checkpoint so the security cookie is described in your cookie policy, keep challenge logs no longer than necessary, sign a data processing agreement with v4Guard and confirm where traffic is filtered so you can document any transfer.

Compliance

v4Guard Checkpoint and the GDPR

Legal basis
Legitimate interest (Art. 6(1)(f) GDPR)
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive (Cookie Law)

Impact assessment (DPIA)

A screening assessment is advisable for v4Guard Checkpoint, and a full DPIA may become necessary if you combine it with other tracking tools or process data on a large scale.

Sample text for your banner

We use v4Guard Checkpoint to protect the site against fraud and automated attacks. With your consent we store the cookies described in our cookie policy. You can accept, refuse or withdraw your choice at any time.
Cookies and trackers

What v4Guard Checkpoint sets and contacts

Tracking method
Server side traffic filtering with a strictly necessary security cookie
Server location
United States (v4Guard)
Data transferred outside the EU
The v4Guard Checkpoint challenge is served from a global network that includes nodes outside the European Economic Area, so an IP address may be processed in a third country.

Cookies set (2)

NameTypeDurationPurpose
__v4g_checkpointStrictly necessary1 hourRecords that the visitor completed the Checkpoint verification so the browser is not re challenged
__v4g_sessStrictly necessarySessionLinks the verification result to the current browsing session for the duration of the visit

Third-party domains contacted (2)

  • v4guard.com
  • checkpoint.v4guard.com
Questions

Frequently asked questions about v4Guard Checkpoint

Can't find your question? Write to us, we answer fast.

What cookies does v4Guard Checkpoint set?

v4Guard Checkpoint sets the following cookies: __v4g_checkpoint, __v4g_sess. Each one is listed in the cookie table on this page with its type, duration and purpose, and you should mirror that list in your own cookie policy.

Is consent required to use v4Guard Checkpoint?

No prior consent is needed for the strictly necessary cookies v4Guard Checkpoint uses to function, but you must still describe them in your privacy and cookie policy under the transparency rules.

What is the legal basis for v4Guard Checkpoint?

The lawful basis is Legitimate interest (Art. 6(1)(f) GDPR). Record this basis in your records of processing and state it in the privacy notice shown to visitors.

Does v4Guard Checkpoint transfer data to a third country?

Yes, a transfer outside the European Economic Area can occur. The v4Guard Checkpoint challenge is served from a global network that includes nodes outside the European Economic Area, so an IP address may be processed in a third country. Rely on an adequacy decision or Standard Contractual Clauses and document the safeguard.

Do I need a DPIA for v4Guard Checkpoint?

A full DPIA is not always mandatory for v4Guard Checkpoint, but a documented screening assessment is wise, especially alongside other tracking tools.

How do I implement v4Guard Checkpoint in a compliant way?

Implement v4Guard Checkpoint through your consent layer: keep strictly necessary functions always on, gate optional ones behind consent, sign a data processing agreement with v4Guard where it acts as a processor and keep your cookie policy in sync with the real cookies.

What are the alternatives to v4Guard Checkpoint?

Alternatives include other anti bot and denial of service providers such as Cloudflare, Akamai or self managed rate limiting. They follow the same legitimate interest logic, so the compliance steps are similar.

How do I update my cookie policy for v4Guard Checkpoint?

List every cookie v4Guard Checkpoint sets in your cookie policy with its name, purpose and retention, state the legal basis, name v4Guard where relevant, and update the policy whenever the tool changes so refusals in your banner are always honoured.

Same category

More services: Security

See the whole category

Fortinet FortiGate

Fortinet FortiGate is a comprehensive web security solution that protects websites and applications from cyber threats including DDoS attacks, SQL injection, and cross-site scripting. It provides web application firewall (WAF) capabilities, real-time threat detection, and automated incident response. Fortinet FortiGate offers SSL/TLS encryption, bot management, and security monitoring. With compliance reporting and vulnerability scanning, Fortinet FortiGate strengthens your overall security posture.

Essential

c/side

c/side is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. c/side integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, c/side helps organizations maintain robust websites that meet user expectations and technical requirements.

Essential

BuySafe

BuySafe is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. BuySafe integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, BuySafe helps organizations maintain robust websites that meet user expectations and technical requirements.

Essential

Cloudflare Turnstile

Cloudflare Turnstile is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Cloudflare Turnstile supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Cloudflare Turnstile ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Essential

Regula

Regula is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Regula supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Regula ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Essential

CoinHive Captcha

CoinHive Captcha is a bot detection and CAPTCHA solution that protects websites from automated abuse, spam, and fraud. It uses advanced risk analysis and challenge mechanisms to distinguish legitimate users from bots without creating friction. CoinHive Captcha defends against credential stuffing, fake accounts, and automated scraping while maintaining smooth user experience. With adaptive security that evolves against threats, CoinHive Captcha safeguards web applications and data.

Essential

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site