Everyone can see my HTML code and accordingly my reCaptcha private key. Is it a safe thing?
From the reCAPTCHA docs:
The secret key authorizes communication between your application backend and the reCAPTCHA server to verify the user's response. The secret key needs to be kept safe for security purposes.