Spam protection & limits
Honeypot, rate limiting, closing forms, and per-form retention: how public submissions stay clean.
Built-in protection
Every public form is spam-protected from day one, without a captcha in your respondents’ way: a honeypot field catches bots, a submission sent within a second of the page loading is treated as automated and quietly discarded, and submissions are rate-limited per form. Unlimited free responses never means unlimited abuse: our Fair Use Policy sets the boundaries.
Answer length limits
Typed answers have generous caps, so one submission can’t flood your results: short text up to 1,000 characters, long text up to 20,000, and email addresses up to 320. The form stops input at the limit, and the server checks it again.
Closing a form
Close a form when you have collected enough. Respondents see a tidy closed-form notice instead of the questions, and no new submissions are accepted.
Data retention
Per-form retention controls let you keep responses only as long as you need them. You can export or delete anytime. See GDPR & your data.