Changelog

We build in the open. Here is what we have shipped recently.

October 2026

A cookie banner for analytics. We use Google Analytics to count visits to our website. It sets analytics cookies (_ga and _ga_<ID>) only if you accept them in the new cookie banner, and you can change your mind any time with "Cookie settings" in the footer. Before you choose, and if you decline, Google still receives a basic cookieless record of each page visit, including your IP address. Our banner never grants advertising consent, and we don't use Google Analytics for advertising. The privacy policy has been updated to match.

Clearer send limits for Pay as you go. Pay as you go now has a single, straightforward monthly limit of 20,000 submissions per form. You're notified by email at every 500-submission milestone, again as you approach 20,000, and once more if you reach it. Submissions beyond the limit are held safely — nothing is ever lost — and delivered automatically when your limit is raised or your billing cycle resets. Contact us any time to raise your limit.

A privacy policy that says what we actually do. Rewritten in plain language: who receives your data and why (and who doesn't), where it is stored, real retention periods, and your rights under the NZ Privacy Act, GDPR and CCPA. No advertising and no boilerplate.
Three free forms. The free plan now includes up to three forms, so you can cover a couple of sites before upgrading.
Smarter spam protection. A new scored anti-spam pipeline (captcha, honeypot, blocklists and a refreshed Botbuster) cuts false positives while catching more bots — and legitimate submissions are never dropped because a captcha provider has a wobble.
More reliable delivery. Form submissions are now queued and retried, so a slow mail server can no longer hold up your form or lose a submission.
Tighter security. reCAPTCHA now protects the login and contact forms, account-verification links are signed, and the floating badge is hidden with the required attribution shown inline.
Dependable billing. The billing cycle is now idempotent and overlap-safe — no double invoices or double charges — with externally-paid invoices reconciled correctly from Xero.
Findable on the web. Added a sitemap and baseline technical SEO across the public site.

Want something added? Let us know.