Changelog

We build in the open. Here is what we have shipped recently.

June 2026

• A privacy policy that says what we actually do. Rewritten in plain language: who receives your data and why (and who doesn't), where it is stored, real retention periods, and your rights under the NZ Privacy Act, GDPR and CCPA. No advertising, no tracking cookies, no boilerplate.
• Three free forms. The free plan now includes up to three forms, so you can cover a couple of sites before upgrading.
• Smarter spam protection. A new scored anti-spam pipeline (captcha, honeypot, blocklists and a refreshed Botbuster) cuts false positives while catching more bots — and legitimate submissions are never dropped because a captcha provider has a wobble.
• More reliable delivery. Form submissions are now queued and retried, so a slow mail server can no longer hold up your form or lose a submission.
• Tighter security. reCAPTCHA now protects the login and contact forms, account-verification links are signed, and the floating badge is hidden with the required attribution shown inline.
• Dependable billing. The billing cycle is now idempotent and overlap-safe — no double invoices or double charges — with externally-paid invoices reconciled correctly from Xero.
• Findable on the web. Added a sitemap and baseline technical SEO across the public site.

Want something added? Let us know.