Embed Cloudflare Turnstile on my site
Turnstile is Cloudflare’s replacement for the old picture puzzles. Most visitors see nothing at all, bots are stopped, and no visitor data is sold on. It sits inside a form to keep spam out of your inbox.
The prompt
“Add a Cloudflare Turnstile check to the contact form so we stop getting spam enquiries.”
Signed in, Get my prompt fills in your site for you. Otherwise press Copy and fill in the [bracketed] parts. First time? Connect your AI to bernard once: Use your own AI (opens in a new tab).
Ask your AI
Add a Cloudflare Turnstile check to the contact form so we stop getting spam enquiries.
What you need first
A Turnstile site key from your Cloudflare dashboard.
What bernard checks
The Cloudflare Turnstile tool is on bernard’s permitted list. Someone read the maker’s own instructions (https://developers.cloudflare.com/turnstile) on 2026-09-14 and decided it was safe to run on a customer’s site: Only the implicit rendering mode is on the list; explicit rendering needs a page function and is not admitted. The config sits on a plain div, so the data-*-callback attributes are not policed by this row today (PRD 191 §10). Turnstile is a security and anti-fraud check on a form the visitor is sending, which UK cookie law names as strictly necessary, so Lindsay decided on 2026-10-21 that it needs no cookie consent. Your site loads it from the maker’s own address. Cloudflare Turnstile comes from the maker’s own address, always at whatever version they currently publish, so there is no pinned version here for bernard to check each week. Keeping it current is the maker’s job. What bernard controls is the address: nothing else may be loaded in its place.
Your AI writes the exact tag bernard permits, on a private preview. You look at it and approve it before anything goes live.
People search for this as: spam, captcha, turnstile, bots, contact form, anti-spam.
For the full list of libraries, what is waiting, and how to ask for one that is not there, see Embed a calendar, a diagram, a chart or another tool on my site.
Questions people ask
- Do I need to write any code to use the Cloudflare Turnstile tool?
- No. Your AI writes the exact tag bernard permits and puts it on a preview. You approve it before it goes live, and pasted code is removed for safety every time.
- Is the Cloudflare Turnstile tool safe on my site?
- bernard admits it only from its own published address, with its settings written as plain data rather than code. Cloudflare Turnstile comes from the maker’s own address, always at whatever version they currently publish, so there is no pinned version here for bernard to check each week. Keeping it current is the maker’s job. What bernard controls is the address: nothing else may be loaded in its place. Nothing else about it can be changed from a page.
- What do I need from the Cloudflare Turnstile maker first?
- A Turnstile site key from your Cloudflare dashboard.
- Can I change it later?
- Yes. Say what you want different and your AI redoes it on a preview for you to approve. Nothing about it is baked in.