Yes. Paste your form endpoint into the form action URL. Works with any HTML form - Webflow, Framer, Next.js, or plain static sites.

We notify you at 50%, 80% and 100% usage. Hobby submissions are kept for 30 days; paid plans offer extended history.

We use a multi-layer spam shield with proprietary behavioral filters to block bots automatically.

When volume is low we send one email per submission. When demand is higher we batch multiple submissions into a single digest email so your inbox stays clean. On Pro you can turn digest off per form or globally in settings.

Pro plans use AI to label each submission (e.g. sales, support, feedback) and assign a priority. High-priority leads trigger an instant notification even when digest is on, so you never miss a hot lead.

All users can download their full account data anytime via Account export in Settings (dashboard). This includes your profile, forms, and submissions. Submission exports in CSV, JSON, or Excel are available on Starter and Pro (with row limits per export).

Starter and Pro have an in-app support thread in the dashboard. Hobby users can email support@boringform.com for help.

Yes. Set a custom redirect URL in the dashboard (Starter and Pro). After submit, users go to your page.

Data is encrypted at rest. We're designed for GDPR compliance and don't sell your data. See our Privacy Policy for details.

Enter your email for a one-time activation link, or sign in with Google for instant activation. Use the dashboard to copy endpoints and manage forms.

Request a new link from the same page (short cooldown) or use a different email.

No. Use an HTML form or just the endpoint; we handle server, email, and spam.

Yes. EU-compliant; DPA on request. We don’t sell your data.

Starter and Pro include secure file attachments. Your files are accessible with your submission history. You can download all your data anytime via Account export (Settings)—no lock-in.

Starter and Pro include a webhook URL per form and integrations (Slack, Zapier, etc.). Plug in your destination; we send the JSON.

We save the submission first, retry up to 3 times, then you can retry from the dashboard. Each attempt (initial or retry) counts as a notification.

Each email we send and each webhook call (including retries) counts as one notification. All plans include unlimited notifications. We use digests to batch multiple submissions into a single email when it makes sense.

Add ?dry-run=true to the form URL. We validate but don’t save, send, or count it. Response: 202 and { "dryRun": true, "valid": true }.

Yes. Optional HMAC-SHA256 per form: set a webhook secret in settings; we send X-Boringform-Signature: sha256=<hex>. You verify on your side.