The latest version of the bot detector reCaptcha is invisible to users and has spread to more than 650,000 websites. It’s great for security—but not so great for your privacy.