For website operators

Contact form without cookies, without US transfer

Embed as iframe or subdomain. No tracking, no reCAPTCHA, no cookie-banner requirement. Hosting in Germany, DPA per GDPR Art. 28.

Start template
See embed code

0 Cookies no cookie-banner wall

You know the cookie-banner problem

Contact Form 7 = Google reCAPTCHA cookies

You must show cookie banner, user must consent — and exactly then they bounce. Conversion dies.

US hosting = Schrems-II issue

Typeform, Jotform, HubSpot store in US data centres. GDPR risk on every enquiry.

Bot spam without reCAPTCHA?

You need spam protection, but without Google. If you do not know Cloudflare Turnstile, you despair.

How the contact form gets clean

  1. 1

    Customise template, get embed code

    Configure fields (name, e-mail, subject, message). Embed as iframe or web component.

  2. 2

    Embed in WordPress/HTML

    Copy & paste into your site. No WordPress plugin, no npm install. Works in 5 minutes.

  3. 3

    Enquiries land in your inbox

    E-mail to you, optional auto-reply to sender. Webhook possible to CRM (HubSpot DE, Brevo).

Clean, fast, compliant

Zero cookies, zero tracking

No banner needed, no user click-through.

Cloudflare Turnstile instead of reCAPTCHA

Bot protection without Google. Invisible to users.

Hosting in Germany

Hetzner data centre DE, AES-256 encryption.

DPA per GDPR Art. 28

Standard DPA as PDF on request, signed in 1 min.

Adaptable to your CI

Colours, logo, font — matches your site.

Free covers small sites

Free

3 forms, 250 responses/month

Pro

Unlimited, 10,000 responses/month, AI included

View all plans

GDPR + embedding FAQ

Do I really not need a cookie banner?
Correct — we set no cookies (not even session). German TTDSG requires banners only for non-essential cookies. Since we set none, no banner. Cloudflare Turnstile bot protection is server-side + without user-tracking cookie.
Where are enquiries stored?
In our Hetzner data centre in Nuremberg/Falkenstein (Germany). AES-256 encryption at rest. DPA per GDPR Art. 28 governs processing. No US subprocessor.
How do I integrate in WordPress?
Three ways: 1) iframe in custom HTML block, 2) Web Component (script in header + element in post), 3) Custom domain as subdomain. Custom domain is Pro feature.
How to prevent spam without reCAPTCHA?
Cloudflare Turnstile active by default (free). Invisible to users, similar effectiveness to reCAPTCHA. Plus rate limiting + honeypot fields.
Can I set e-mail recipients per form?
Yes — up to 5 recipients per form. Conditional routing also possible (e.g. sales → sales@, support → support@).
What if someone enters sensitive data?
All fields encrypted on storage. You can require a privacy-consent checkbox before submit. Optional: auto-deletion after 90 days.

Clean contact form in 5 minutes

Start now