Controls (1:1 with Settings UI)
Password
toggle
default:"false"
Require a password before the schema is shown. Stored hashed — enter a new password only to replace an existing one.
CAPTCHA (one provider)
Visible only when reCAPTCHA and/or Turnstile are connected under left-rail Integrations.select
default:"none"
none | recaptcha | turnstile. Exactly one provider per form — never both. Not a Studio canvas block.Close form
toggle
default:"false"
Immediate kill switch — no new responses.
Max entries
toggle
default:"false"
Cap volume with
max_submissions + frequency (total / day / week / month / per user options from the UI) and a custom max_submissions_message.Scheduling
toggle
default:"false"
Timezone, weekday checkboxes, start/end datetimes, waiting message, expired message.
Closed message
toggle
default:"false"
Custom copy when the form is manually closed (separate from schedule / cap messages).
Duplicate prevention
toggle
default:"false"
Identify repeats by IP or by a chosen form field (e.g. primary email). Second submit is rejected server-side. Prefer a field (email) when possible. IP mode needs correct trusted proxies behind a CDN/load balancer; private/reserved IPs are ignored so a misconfigured proxy cannot lock the form for all visitors.