The Form, File Upload, and Booking blocks all let your published site's visitors send you something, without needing an account of their own. All three share the same protection: submissions are rate limited per visitor, and gated behind a honeypot field and Cloudflare Turnstile, so automated spam is rejected before it ever reaches you.
Form
Collects whatever fields you add and stores each submission, viewable from your project's own Submissions tab. It can optionally send you an email notification for every new one, once you've connected your own Resend account from Integrations, see "Sending email from your app".
File Upload
Lets a visitor send a real file, not just form field values, for example, a resume or a photo. There's no dedicated viewer tab yet, uploaded files are stored the same way your own project images are, so check your Supabase Storage dashboard directly if you need to review them today.
Booking
A Calendly style appointment picker. Double booking is prevented at the database level, so even if two visitors pick the same slot at the same instant, only one booking can succeed, the other sees the slot as already taken. Times are shown to visitors exactly as you set them (for example, "Times shown in Europe/Budapest"), they are not converted to each visitor's own timezone.
Tip: These blocks collect personal data about your own visitors (a name, an email, a message, a file). You, not us, are responsible for that data under data protection law, our Privacy Policy and Terms of Service explain that relationship in full.