Local, no-API, no-CAPTCHA anti-spam protection for WordPress forms.
2o2code Spamless Forms adds local anti-spam protection to common WordPress form flows without CAPTCHA challenges, external spam scoring APIs, tracking, or account setup.
The Free plugin is designed to be useful on its own. It checks supported submissions on the site where it is installed, returns generic visitor-facing errors for blocked spam, and stores only minimal event metadata for the admin dashboard.
Supported Free integrations in version 1.0.0:
- Contact Form 7
- WPForms Lite
- Elementor Form Lite through Elementor and Hello Plus
- Native WordPress comments
- Native WordPress login
- Native WordPress registration
Privacy defaults:
- No full form submission storage.
- No raw IP address storage in plugin event metadata.
- No raw email address storage in plugin event metadata.
- No raw user agent storage in plugin event metadata.
- Event records are bounded and retained for a configurable short window.
- No external anti-spam service is contacted.
Future PRO releases may add more integrations and advanced workflows. Those features are not included in the Free version and are not required for the supported protections listed above.
Protection modes and strictness:
- Protect mode blocks hard spam signals and applies the selected timing policy.
- Monitor mode observes spam-related decisions without blocking the submission and records them when event logging is enabled.
- Disabled mode bypasses checks and decision logging.
- Safe ignores timing-only signals, Balanced records timing-only signals as suspicious, and Strict blocks submissions completed below the configured minimum time.
- Optional allowed-submission logging records only minimal metadata and the reason “No spam signals detected.” when both event logging and allowed logging are enabled.
