“Replaced my entire Express form handler with a single URL. Literally deleted 200 lines of code and it works better now.”
Marcus KimFull-stack Developer, Tines
Forms that ship. Without backend.
Formtorch is the modern form backend for static sites and apps. Capture submissions, route webhooks, and block spam via a single API endpoint.
<!-- Drop this in any page -->
<form
action=
method="POST"
>
<input type="text" name="name" placeholder="Your name" />
<input type="email" name="email" placeholder="Email" />
<textarea name="message"></textarea>
<!-- Spam protection: honeypot field -->
<input type="text" name="_honeypot" style="display:none" />
<button type="submit">Send</button>
</form>✓ 200 OKSubmission received. Email sent.
Trusted by teams shipping on
How it works
The easiest way to ship forms
From HTML form to delivered email in under a minute, with spam protection built in.
No backend, no deployment, no headaches.
- 1
Connect your form
Point your form action (or fetch) to a Formtorch endpoint. Works with any form, any framework, any host.
- 2
Collect submissions
We accept HTML form posts, AJAX requests, and JSON payloads. Built-in validation, honeypot spam filtering, and reCAPTCHA support.
- 3
Get notified instantly
Receive submissions via email, view them in your dashboard, trigger webhooks, or export as CSV. Your data, your way.
Video coming soon
We'll drop a quick walkthrough here.
Formtorch overview1:30
Works everywhere
Drop in. Ship it.
Formtorch works with any stack. If it renders HTML or sends HTTP, you're good.
contact.html
<!-- Plain HTML — no JavaScript required --><form action="https://formtorch.com/f/xK9a2b" method="POST"> <label for="name">Name</label> <input id="name" name="name" type="text" required /> <label for="email">Email</label> <input id="email" name="email" type="email" required /> <label for="message">Message</label> <textarea id="message" name="message" rows="4"></textarea> <!-- Honeypot: hidden spam trap --> <input name="_honey" style="display:none" /> <!-- Redirect after submit --> <input type="hidden" name="_redirect" value="https://mysite.com/thanks" /> <button type="submit">Send message</button></form>Serious backend for serious forms
Built by engineers who expect infrastructure to just work.
Spam & validation
Stop bots before they reach your inbox
TorchWarden™ runs on every submission — scoring for honeypots, rate abuse, keyword patterns, and duplicates. Real submissions pass instantly.
- Scoring-based engine with configurable thresholds
- Honeypot fields added with a single attribute
- Rate limits enforced at IP, form, and project level
- Duplicate detection via content hashing
TorchWarden™ — Spam Protection
Honeypot fieldON
Rate limitingON
Keyword threshold60 pts
Duplicate detectionON
Last submission score12 / 100 — clean
Webhooks & integrations
Route events anywhere, instantly
Every form submission fires a webhook to any HTTP endpoint. Deliver to Slack, Zapier, Make, or your own API. Automatic retries with full delivery history.
- Configurable per-form webhook endpoints
- Exponential backoff on failed deliveries
- Inspect every delivery attempt in the log
- Structured JSON payload with metadata fields
Webhook delivery log
09:41:23api.acme.com/hooks200 OK
09:38:11hooks.slack.com200 OK
09:31:05api.acme.com/hooksRetrying…
09:21:44webhook.site/abc200 OK
Storage & exports
Your data, always accessible
File uploads stored securely and linked to submissions. Export any date range as a CSV in seconds — no matter how many rows.
- Accepts multipart/form-data file uploads
- Per-submission file metadata in the dashboard
- Cursor-based CSV export scales to millions of rows
- Date-range filters: 24h, 7d, 30d, or all time
File uploads
resume_ada.pdf284 KBStored
cover_letter.docx48 KBStored
portfolio.zip2.1 MBStored
submissions_all.csv
Everything a form backend needs
Battle-tested infrastructure, not a weekend project. Built for teams that ship.
Rate limiting
4-layer protection: per-IP, per-form, per-project, and monthly quotas. Powered by Redis with in-memory fallback.
Honeypot fields
Invisible fields that catch bots automatically. Zero friction for real users, zero chance for automated spam.
CAPTCHA support
Plug in Cloudflare Turnstile, hCaptcha, or reCAPTCHA v3. Toggle per-form from the dashboard.
Custom redirects
Send users to any URL after submission. Set per-form defaults or pass _redirect in the form payload.
Webhook retries
Failed deliveries automatically retried with exponential backoff. Full delivery log in the dashboard.
Encrypted storage
Submissions stored in Postgres with field-level encryption. SOC 2 in progress. GDPR-compliant data handling.
Team access
Invite team members with role-based access. Owners, admins, and viewers. Per-project permissions.
Slack and email
Get notified instantly in Slack, email, or any HTTP endpoint. Configurable per-form notification rules.
GDPR-ready exports
Export any date range as CSV. Cursor-based pagination scales to millions of rows without timeouts.
Testimonials
Loved by developers
who ship fast.
Join 100+ of developers who ditched their form backend and never looked back.
Stop building form backends.
Start shipping.
Your first 150 submissions per month are always free, forever.