You only put hCaptcha / BotStop where you actually need the protection, and it certainly doesn't follow your users around unnecessarily