Contact Form

Let visitors send you messages without exposing your email address. Messages are stored in your database and optionally forwarded to your inbox.

How It Works

1. A visitor fills out a Connect block on your public page (first and last name, email, an optional message, and a consent checkbox).
2. If CAPTCHA is configured, the widget checks the visitor is a real person and the server verifies the token. A hidden honeypot field catches simple bots either way.
3. The message is saved to your Inbox and/or emailed to you, depending on the delivery mode.
4. You can view and manage all submissions at /admin/inbox.

Visitors are never told a message failed once it is saved. If an email notification fails (or email isn't set up) the message is kept in your Inbox, and the failure is written to the server log and the audit log (contact.email_failed).

Setting Up

1. Enable the Form

Go to /admin/inbox and turn on Accepting messages in the header, then add a Connect block at /admin/links.

2. Configure Email (Optional)

At /admin/settings/email:

1. Select a provider: Resend (Cloudflare Email Workers coming soon).
2. Enter your API key.
3. Set the "From" email address (must be verified with your provider).
4. Pick the Contact-form delivery:
   • Inbox only (database) — the default.
   • Email only — sends you a notification; if the send fails, the message is saved to the Inbox instead.
   • Inbox and email — saves to the Inbox and emails you.

The email modes need an API key and a sender address. The notification contains the visitor's name, email, message, "where we met" (if asked) and the form's block title. You can preview it in the Email Templates section.

3. Configure CAPTCHA (Recommended)

At /admin/settings/integrations → CAPTCHA, choose a provider. Both the site key and the secret key are required once a provider is selected. Register the widget for your site's exact hostname (the server rejects tokens issued for another hostname).

Cloudflare Turnstile -- A privacy-friendly, usually invisible challenge.

1. Go to Turnstile in the Cloudflare dashboard.
2. Add your site and get the site key and secret key.
3. Enter both keys in the CAPTCHA settings.

Google reCAPTCHA (v2 checkbox) -- The "I'm not a robot" checkbox.

1. Register a reCAPTCHA v2 → "I'm not a robot" Checkbox site at google.com/recaptcha.
2. Get the site key and secret key.
3. Enter both keys in the CAPTCHA settings.

hCaptcha -- A checkbox challenge from hcaptcha.com.

1. Add your site in the hCaptcha dashboard.
2. Get the site key and secret key.
3. Enter both keys in the CAPTCHA settings.

The widget loads from the provider in the visitor's browser, and the server sends the provider the token and the visitor's IP to verify it. Mention your provider in your privacy notice.

Tip: Without CAPTCHA, the form still works but relies on rate limiting and the honeypot only. Turnstile is recommended for a frictionless visitor experience.

Managing Submissions

Navigate to /admin/inbox to view all submissions. Each one shows:

• Sender name and email
• Message content
• Date and time
• Read/unread status

You can mark as read, mark as unread, or delete any submission, or use Select to act on several at once.

The Inbox item in the navigation shows an unread badge.

Form Fields