Forever Free Feature
Tilkly Forms: Free Contact Forms, Reservations, and Appointment Bookings Built Right In
Let your visitors reach you without any setup. Tilkly Forms are built into every site for free: contact forms, reservation forms, and appointment bookings all in one tidy dashboard. No third-party tools, no monthly fees.
What are Tilkly Forms?
Tilkly Forms are free built-in forms that come with every published site. Your visitors can contact you, book appointments, or make reservations directly from your page. Every reply lands in your Forms Dashboard, not in some third-party inbox. You get email alerts, CSV export, spam protection, and automatic GDPR-compliant cleanup after 90 days, all completely free.
How Tilkly Forms works
Drop a form block into any Tilkly page in the visual editor. When you click publish, Tilkly’s form injector rewrites the form’s action attribute to /submit/{your-workspace}/{form-id}, adds a hidden page slug, adds a honeypot anti-spam field, and inserts the required privacy consent checkbox if you have not added one yourself.
Visitors fill in the form, the data posts to Tilkly, the submission is validated, and you see it in your dashboard inbox. You also receive an asynchronous email notification so you do not have to keep the dashboard open. There is nothing to install on a third-party service.
Form field types and customization
Tilkly ships with text, textarea, email, telephone, checkbox, radio group, select dropdown, file upload, date picker, and time picker fields. You set the label, placeholder, required flag, and help text inline.
Beyond the basics you can add a marketing opt-in checkbox tracked separately from the privacy consent, point the consent block at a custom privacy URL per form, and override the visible consent text. Each form gets a unique form ID so the inbox stays organized when you have a contact form, a newsletter form, and a quote form on the same site.
GDPR compliance built in
Submissions auto-delete on day 90 to satisfy data-minimization expectations under GDPR. The consent text, consent version, privacy URL, and consent timestamp are stored with every submission so you can prove what the visitor saw and accepted.
IP addresses are hashed with SHA-256 before storage so you can still identify abuse patterns without keeping raw personal data on disk. Visitors can request erasure under GDPR Article 17, and the dashboard lets you delete a submission with one click.
Spam protection that does not annoy visitors
Every form ships with a hidden honeypot field named website. Real visitors never see it, but most spam bots fill every field they find. Tilkly silently accepts and discards those submissions so they never reach your inbox or counter.
For high-traffic sites you can paste a reCAPTCHA v3 site key and secret into Settings. Tilkly verifies every submission with Google’s invisible score, and there is no extra friction for legitimate users. The public submit endpoint is also rate-limited to 10 requests per minute per IP.
Managing submissions and notifications
The dashboard inbox shows every submission with the form ID, page slug, every field, the hashed IP, and the timestamp. Filters help when you have multiple forms or want to review a specific page. You can mark items as read individually, bulk mark all as read, and delete what you do not need.
Every list page has a CSV download. The export includes the submission ID, form ID, page slug, full field JSON, hashed IP, and ISO timestamp, ready to import into a CRM or spreadsheet. Forms are included on every plan, including the free tier, with no per-submission fee and no monthly cap.
Continue exploring
Frequently Asked Questions
Do I need to embed Formspree, Typeform, or another service?
No. Tilkly auto-injects every form on publish. The action URL, page slug, honeypot, and consent block are added for you, and submissions land directly in your Tilkly dashboard.
Which field types does Tilkly Forms support?
Text, textarea, email, telephone, checkbox, radio, select, file upload, date, and time. You can mark any field as required and customize the placeholder, label, and validation in the visual editor.
What happens to submissions after 90 days?
Submissions auto-delete on the 90th day to keep visitor data minimal under GDPR. You can also delete submissions manually at any time, and CSV export lets you archive them outside Tilkly first.
How does Tilkly stop spam?
Every form ships with a hidden honeypot field that silently rejects bots. You can also paste a reCAPTCHA v3 site key in settings to add invisible verification. Submission endpoints are rate-limited to 10 per minute per IP.
Can I export form submissions?
Yes. Every submissions list has a CSV download that includes the form ID, page slug, all submitted fields, the IP hash, and timestamps. There is no per-export fee.
Are forms included on the free plan?
Yes. Tilkly Forms are unlimited on every plan, including free. There is no per-submission fee and no monthly cap.
Your website is waiting. Start building for free today.
The visual builder is always free. Choose from 200+ beautiful templates or design from scratch, then publish on your own domain with free hosting, free SSL, and a global CDN. Want to go even faster? AI credits let you generate a full website in seconds or unlock the Agents Store for SEO blog posts, answer-engine visibility audits, social media packs, translations, and more. Every credit you buy also helps us keep Tilkly free for everyone, which means a lot to us. Credits never expire: 5€ = 80 credits • 10€ = 200 credits • 29€ = 500 credits.