> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sequenzy.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Bot Protection Frame

> The Cloudflare Turnstile check that saved forms and popups with bot protection load in an iframe.

Serves the Cloudflare Turnstile check for saved forms and popups with bot protection turned on. No API key is required, and you do not need to call it yourself: the [saved form embed script](./saved-form-embed-script) and popups load it in a small iframe and send its token with the submission as `sequenzyBotCheckToken`.

The check runs on Sequenzy's own domain, so it works on any site you embed a form or popup on. Most visitors never see it. When Cloudflare needs a visitor to confirm they are human, the iframe expands at the end of the form.

## What happens to each signup

| Check result | Outcome |
| - | - |
| Passed | Subscribed as usual |
| Failed, or no token (for example the plain HTML form snippet, which cannot run the check) | Must confirm by email before they are subscribed |
| Failed, after the workspace's confirmation email or sender was removed | `400` asking the visitor to try again |
| Cloudflare unreachable | Subscribed as usual, so an outage never blocks signups |

Turning bot protection on requires a double opt-in confirmation email and a sender profile, because failed signups are sent that email.

If your site sets a Content Security Policy, allow `frame-src https://api.sequenzy.com`. Otherwise the check cannot load, and every signup goes through email confirmation.

Turn bot protection on in the form or popup builder, or with `botProtection` on [create saved form](./create-saved-form), [update saved form](./update-saved-form), [create popup](./create-popup) and [update popup](./update-popup).

## Responses

<ResponseExample>
  ```html 200 theme={null}
  <!doctype html>
  <html lang="en">
    <!-- Renders the Turnstile widget and posts its token to the embedding page. -->
  </html>
  ```
</ResponseExample>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.