Less spam, more useful support

Contact requests now pass a browser-bound form check before they reach the support inbox. Repeated messages and excessive submissions cannot keep sending notifications, even across server restarts.

Obvious promotional spam is retained for review without sending email or Telegram alerts. Normal bug reports and support questions can still include links. Telegram contact alerts no longer expand those links into large previews.

If a form check fails or storage is unavailable, your text stays in the form so you can retry. The form still works without JavaScript or a visual puzzle.