I've wanted to but wasn't sure how to keep track of individuals. What works for you? IP Addresses, cookies, something else?
There’s some stuff you can do, like creating risk scores (if a user changes ip and uses the same captcha token, increase score). Many vendors do that, as does my captcha provider.