Forms
Spam protection
Honeypot and optional Cloudflare Turnstile CAPTCHA.
Every form ships with an always-on honeypot field. Bots that fill the hidden field are silently dropped without creating a submission. There's nothing to configure — it just works.
CAPTCHA (Cloudflare Turnstile)
For stronger protection, open a form, find Protection & replies in the right panel, and turn on CAPTCHA. That's the whole job — you don't add any code, scripts, or keys. When enabled, your form automatically shows a quick, privacy-friendly challenge and we verify it before accepting a submission.
How you'll know it's active
The CAPTCHA toggle shows a live status. A green “Ready” means the challenge will appear on your form. If you see an amber note, CAPTCHA isn't available on your plan/workspace yet — the toggle still saves, and your honeypot and rate limiting keep protecting the form in the meantime.
- Honeypot — always on, invisible to real visitors, blocks naive bots.
- Rate limiting — repeated submissions from the same source are throttled automatically.
- CAPTCHA — optional extra challenge for forms that get targeted spam.