Stop spam submissions

A public form attracts the odd bot. HappySaid has a few simple defences, and you decide what appears on your site.

Nothing shows until you approve it

New testimonials from your collection page land in the Pending tab of your inbox. They don't appear in widgets or on your proof page until you click Approve. This is your main protection.

Automatic checks

• A hidden field. The form has a field that real people never see. Bots tend to fill every field, and when this one is filled, HappySaid stores nothing.
• A submission limit. One device (identified by a hash of its IP address) can send up to five submissions to one Space in an hour. After that, the form asks them to try later.
• Duplicate protection. If the same device sends the same text twice within ten minutes, for example by tapping the button twice, only the first is kept.

What a bot sees

A blocked bot sees the normal thank-you page. We don't tell it that it was blocked, so it has no hint to adapt to.

If spam gets through

1. Open the testimonial in your inbox.
2. Click Archive to hide it, or open the menu and choose Delete to remove it. See Approve and archive.
3. If you see a pattern, change your collection link by editing your Space's slug. The old link will stop working. Note that this also breaks links you have already shared.

Limits worth knowing

The checks are simple on purpose, to keep the form quick for real customers. They don't include a CAPTCHA. If you are targeted, tell us at support@happysaid.com.

Related

• Held testimonials over the limit
• Consent and what we store