Spam and flood protection

We protect every event automatically:

• A quick, invisible bot check on each response. Attendees' phones do it on their own while they type; a quick sum appears only if the phone can't.
• Rate limits per device and network. They count both a single connection and the wider block it belongs to (an IPv6 /48), so switching addresses doesn't get around them.
• Each form can only be sent once.
• Optional one response per device.

Flood mode

If responses suddenly spike (for example your link was posted publicly), we switch on flood mode for 15 minutes: the bot check gets harder and asks everyone a quick sum too, repeat responses from the same device or network are held, and we email you. On your event page you can:

• Pause responses,
• choose It's my audience if the spike is genuine, or
• add an event code so only people in the room can respond.

Held responses don't count toward your limit until you release them.