How to Enable Bot Protection with reCAPTCHA
Block spam and bot bookings with Google reCAPTCHA. It is on by default on every plan; manage it in Settings → Preferences → Spam protection (reCAPTCHA).
What spam protection does
TidyCal uses Google reCAPTCHA v3, which runs invisibly: bookers never tick a box or solve a puzzle. When someone submits a form, Google scores how likely the visitor is to be a bot, and TidyCal refuses submissions that score as likely bots.
- What it checks: new bookings, reschedules and review submissions on your tidycal.com links.
- Plans: available on every plan, including the Free Plan.
- Default: on for every account. You never need your own Google reCAPTCHA keys.
- Scope: one setting for your whole account. You cannot turn it off for a single booking type.
- Custom domains: booking pages served from your own domain are not checked by reCAPTCHA. See Custom Domains → known limitations.
Turn spam protection on or off
- In the sidebar, click Settings, then Preferences.
- Find Spam protection (reCAPTCHA).
- Choose Enabled to turn it on, or Disabled to turn it off.
- Click Save changes.
The same page holds your timezone, language and appearance settings; see How to Change Your TidyCal Account Settings.
What your bookers see
- When spam protection is on, the booking details form shows this line at the bottom: This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
- Google's floating reCAPTCHA badge is hidden, so nothing covers your booking page.
- If a submission is refused, the booker sees reCAPTCHA verification failed, please try again.
To check that it is working: open one of your booking types on your tidycal.com link, pick a time, and look for the reCAPTCHA line under the booking details form.
Troubleshooting
A booker sees "reCAPTCHA verification failed, please try again."
- An ad blocker, privacy extension or network filter may be blocking Google reCAPTCHA. TidyCal then receives no verification and refuses the booking.
- Ask the booker to allow reCAPTCHA for the page, or to try another browser or network (for example, mobile data instead of office Wi-Fi).
- As a last resort, set Spam protection (reCAPTCHA) to Disabled while they book, then set it back to Enabled.
I don't see the reCAPTCHA line on my booking page
- The line appears only on the booking details form, after a time is picked.
- Check that Settings → Preferences → Spam protection (reCAPTCHA) is set to Enabled.
- If you are viewing the page on your custom domain, reCAPTCHA does not run there. Test on your tidycal.com link instead.
I still receive spam bookings
- Add a required booking question that a bot is unlikely to answer well, such as what the meeting is about. See custom intake form questions.
- Turn on Booking Approval so you review each booking before it is confirmed (Individual Lifetime, Agency Lifetime or Pro).
- If spam keeps getting through, contact TidyCal support with the booking details or email support@tidycal.com.
Frequently Asked Questions
Do I need my own reCAPTCHA keys?
No. TidyCal provides reCAPTCHA for you, and there is no key field to fill in.
Can I turn off reCAPTCHA for one booking type?
No. Spam protection (reCAPTCHA) is one setting for your whole account. On a team booking type, the setting of the member who owns that booking type applies.
Does reCAPTCHA work on my custom domain?
No. reCAPTCHA only runs on your tidycal.com links, so booking pages and review forms on a custom domain are not checked. See Custom Domains.
Does it protect my review form too?
Yes. The same setting checks review submissions from your bookers. See Collect Customer Ratings and Reviews.