Form limits and spam protection

Contact forms are included in the Pro and Max plans with a monthly allowance of messages per site. Behind the scenes, every submission passes through spam checks before it is emailed to you, so the allowance is spent on real messages rather than bots.

Monthly allowance

The allowance is per site and per calendar month. It resets automatically on the first of each month; there is no rollover of unused messages. All contact forms on the site, on every page, share the same count.

To see where you stand, open Plan & Usage in the sidebar. The Form submissions (this month) row shows how many messages have been delivered so far against your limit.

What happens at the limit

When a site reaches its allowance, the form stays on the page but submitting it shows the message "This form has reached its monthly submission limit. Please try again later." No email is sent and the visitor's message is not kept anywhere. Sending resumes automatically when the new month starts. If you regularly get close to the limit, moving the site from Pro to Max raises it to 5,000.

Note: Messages that the spam filter blocks do not count towards the allowance. Only messages that are actually emailed to you are counted.

How spam is kept out

FolioPage uses three layers, none of which ask your visitors to click on traffic lights or type distorted letters:

1. An invisible check in the browser. When a visitor presses send, their browser solves a small computational puzzle in the background. It takes a moment on a normal device and is invisible to the visitor, but it makes mass-submitting forms expensive for bots. If the check cannot complete, the visitor sees "Couldn't verify you're human. Please try again." and can simply submit again.
2. A spam filter. The message is then screened by an anti-spam service that looks at the content, the sender's address and known spam patterns. A message judged to be spam is silently dropped: the visitor sees the normal success message, but nothing reaches your inbox. This keeps spammers from learning what gets through.
3. Sending limits. Each visitor can send at most five messages every ten minutes, and every form submission is single-use, so a captured submission cannot be replayed.

Together these stop the vast majority of automated junk. A determined human can still type a message by hand, just as they could email you directly, so the occasional unwanted enquiry is normal.

Required fields and validation

The form only accepts the fields it was built with, typically name, email and message, and all of them must be filled in. An email address that is not in a valid format is rejected with "Please enter a valid email address." before anything is sent.

Privacy

FolioPage does not store form messages. They are emailed to the address set in Settings and then discarded, so there is nothing to export or delete later. The spam filter does process the message content and the visitor's address in order to screen it; if you publish a privacy policy for your site, you may want to mention that messages sent through the contact form are checked for spam and delivered by email.

Tip: If a real visitor tells you their message never arrived, the most likely cause is the spam filter. Ask them to try again with a fuller message and their usual email address, and see Not receiving form messages? for the other things to check.