Spam on a public booking page is inevitable — bots discover booking forms fast and fill them with junk. Two common defenses: honeypot fields (a hidden field bots fill in but humans don't) and reCAPTCHA v3 (Google's invisible bot score). Here's how to pick.
How honeypots work
A hidden input field — invisible to users, visible to bots — that must remain empty on submission. Bots fill every field they see; if the honeypot is filled, the submission is silently dropped. Zero third-party calls, zero cookies, zero fingerprinting.
Why honeypots aren't enough for public booking pages
Sophisticated bots parse CSS and skip hidden fields. For low-volume, low-attention booking pages, honeypots alone catch 80%+ of spam. For high-value, widely-shared links, you need more.
How reCAPTCHA v3 works
Google's script runs invisibly on the page, computing a bot score based on user behavior, IP reputation, and fingerprint signals. Score below 0.5 = likely bot; dropped server-side. No challenge for the user to solve — it's invisible.
The privacy trade-off
reCAPTCHA v3 sends browser-level signals to Google, which is a privacy concern for strict users. For most business booking pages, the protection outweighs the cost — and Cal Clear loads reCAPTCHA only at submission time, not on page load, to minimize exposure.
Cal Clear's hybrid approach
Cal Clear uses honeypot + rate-limiting by default. reCAPTCHA v3 is available as an opt-in for public booking links where you expect spam bot traffic. Either works; both are free.
This is part of our privacy-first scheduling pillar guide — 18 articles covering every privacy angle.
Frequently Asked Questions
Does Cal Clear require reCAPTCHA?
No. Cal Clear's default anti-spam stack is honeypot + IP rate-limiting, which blocks most casual spam without any third-party involvement. reCAPTCHA is available for public links that see sophisticated bot traffic.
Can I use my own CAPTCHA?
On the Pro plan, you can disable reCAPTCHA and integrate hCaptcha or a custom challenge. For most users, the default anti-spam is sufficient.
Try privacy-first scheduling, free
Cal Clear runs zero trackers on booking pages and auto-deletes booking data on your schedule. Start at calclear.app.