Feature

Spam protection for signup forms

Stop bot and junk signups without a CAPTCHA wall: a domain allow-list, honeypot field, rate limits, and email checks on every campaign.

A public form endpoint attracts bots. Every campaign is protected by default, so junk is rejected before it reaches your list and you do not have to build any of it yourself.

How it works

  • Domain allow-list: only your own sites can submit to a campaign.
  • Honeypot: a hidden field bots fill in; those submissions are silently discarded.
  • Rate limits per IP and per campaign, with a Retry-After hint for well-behaved clients.
  • Email checks: syntax plus a mail-server (MX) lookup to catch addresses that cannot receive mail.
Read the full docs →

Related: How to stop spam on public signup forms