FAQ

Is the access key a secret?

No, and it is not meant to be. It ships in the HTML of a public page, so treat it as public. What limits the damage is that a key can only deliver to the address it was created for — someone who copies it can send you mail you did not want, which is what your spam settings and domain locking are for, but they cannot read your submissions or redirect them anywhere.

Do I need an account?

Not to start. Enter an address on the home page and a key is emailed to you. An account adds the dashboard: submission history, per-form settings, integrations. Forms created without one attach themselves when you later sign up with the same address.

Where do submissions go?

Into your inbox as email, and into the dashboard where you can read, search and export them. How long they stay depends on your plan.

Does it work without JavaScript?

Yes. A plain form post is the baseline — the browser navigates, we redirect it back to your thank-you page. JavaScript only changes whether the visitor leaves the page.

Can I use one key for several forms?

You can, but do not. Settings, spam rules, quotas and history all attach to the key, so sharing one across a contact form and a job application form leaves you unable to configure either independently. Keys are free; make one per form.

What happens when I hit the monthly limit?

Submissions are rejected with a message telling the visitor to contact the site owner another way, and you get told in the dashboard. Blocked spam does not count toward the limit — otherwise a bot could exhaust your quota on purpose.

Can I take it with me?

Export everything as CSV or JSON whenever you like. A form endpoint should not be something you are locked into.