FAQ

Is my form endpoint a secret?

No, and it is not meant to be. It sits in the action of a public page, so treat it as public. What limits the damage is that the endpoint only ever delivers to the address the form was set up for — someone who copies it can send you mail you did not want, which is what your spam settings and domain locking are for, but they cannot read your submissions or redirect them anywhere.

Do I need an account?

Yes. A form is a stored configuration — where mail goes, what counts as spam, which integrations fire — so it has to belong to someone. Signing up and creating your first form is the same short flow, and the endpoint is ready the moment it exists.

Where do submissions go?

Into your inbox as email, and into the dashboard where you can read, search and export them. How long they stay depends on your plan.

Does it work without JavaScript?

Yes. A plain form post is the baseline — the browser navigates, we redirect it back to your thank-you page. JavaScript only changes whether the visitor leaves the page.

Can I use one endpoint for several forms?

You can, but do not. Settings, spam rules, quotas and history all attach to the form, so pointing a contact form and a job application form at the same endpoint leaves you unable to configure either independently. Forms are free; make one per purpose.

What happens when I hit the monthly limit?

Submissions are rejected with a message telling the visitor to contact the site owner another way, and you get told in the dashboard. Blocked spam does not count toward the limit — otherwise a bot could exhaust your quota on purpose.

Can I take it with me?

Export everything as CSV or JSON whenever you like. A form endpoint should not be something you are locked into.