Browser fingerprinting + bot detection signals. Set FINGERPRINTJS_PUBLIC_API_KEY in .env. Free open-source fingerprintjs v3 also runs as fallback.
URL params: ?captcha=on|off · ?delay=ms (fingerprinting, not CAPTCHA — only on/off meaningful)