Help center › Apps

Integrations: Google Places and spam protection

On the Settings → Integrations tab you enter the Google Places API key (for the native Google Reviews block) and can switch on a captcha for every public form on the site (Cloudflare Turnstile or Google reCAPTCHA). The captcha is off by default, because the forms already have built-in spam protection.

The tab is in the System group. Keys are stored encrypted and never leave the server; visitors never see them.

Google Places

  • The Google Places API key powers the native Google Reviews block: it is how we fetch the rating and the reviews.
  • Create the key in Google Cloud Console with the Places API enabled. Usage is billed to your own Google Cloud project.
  • If a key is already set, leave the field empty to keep it.

Spam protection (captcha)

  • Captcha provider: None, Cloudflare Turnstile, Google reCAPTCHA v2 (checkbox) or Google reCAPTCHA v3 (invisible). It applies to every public form on the site, contact forms included – not to one block.
  • Off by default: the forms are already protected by a hidden trap field, a minimum fill-in time and per-visitor and per-site limits. Switch it on if spam still gets through.
  • Create a key pair at the provider and enter both: Site key (public) and Secret key. We check the secret with the provider; if it is not recognised, the tab says so.
  • reCAPTCHA v2 is the "I'm not a robot" checkbox, v3 shows nothing; the two versions use separate key pairs.
  • Switching provider deletes the stored key pair – keys are not interchangeable.
  • Cloudflare Turnstile does not profile visitors. reCAPTCHA profiles them with Google, so if you choose it, mention it in your privacy notice.

Save with Save integrations.