card testing

What’s a privacy-friendly, self-hosted CAPTCHA for preventing bots and card testing?

I run a website on my own VPS and try to store only the user information that is necessary or legally required. I'd prefer not to use third-party…