Spam protection features

Every form includes Turnstile (Cloudflare's CAPTCHA-free verification), honeypot fields, time-trap detection, and per-IP rate limiting — all enabled by default and included on every plan. Duplicate submission prevention is available via cookie-based controls. Suspected spam is silently accepted (not persisted) so attackers get no signal.