Embed Cloudflare Turnstile on my site
Turnstile is Cloudflare’s replacement for the old picture puzzles. Most visitors see nothing at all, bots are stopped, and no visitor data is sold on. It sits inside a form to keep spam out of your inbox.
The prompt
“Tell me when Cloudflare Turnstile is available on my site, and what I need to set up first.”
Signed in, Get my prompt fills in your site for you. Otherwise press Copy and fill in the [bracketed] parts. First time? Connect your AI to bernard once: Use your own AI (opens in a new tab).
Ask your AI
Tell me when Cloudflare Turnstile is available on my site, and what I need to set up first.
What you need first
A Turnstile site key from your Cloudflare dashboard.
What bernard checks
Cloudflare Turnstile is on bernard’s permitted list. Someone read the maker’s own instructions (https://developers.cloudflare.com/turnstile) on 2026-09-14 and decided it was safe to run on a customer’s site: Only the implicit rendering mode is on the list; explicit rendering needs a page function and is not admitted. The config sits on a plain div, so the data-*-callback attributes are not policed by this row today (PRD 191 §10). Your site loads it from the maker’s own address. Cloudflare Turnstile comes from the maker’s own address, always at whatever version they currently publish, so there is no pinned version here for bernard to check overnight. Keeping it current is the maker’s job. What bernard controls is the address: nothing else may be loaded in its place.
Once it is switched on, your AI will write the exact tag bernard permits, on a private preview, and you will approve it before anything goes live.
People search for this as: spam, captcha, turnstile, bots, contact form, anti-spam.
Waiting on consent support
Cloudflare Turnstile sets cookies or sends information about your visitors to another company, so on a site with a cookie banner it has to wait for each visitor to say yes. bernard’s consent system does not yet have the category it needs, so the library is checked and on the list but waiting on consent support rather than switched on. Ask your AI to tell you when it is ready, and it will.
For the full list of libraries, what is waiting, and how to ask for one that is not there, see Embed a calendar, a diagram, a chart or another tool on my site.
Questions people ask
- Do I need to write any code to use Cloudflare Turnstile?
- Not yet: Cloudflare Turnstile is on bernard’s list but not switched on until bernard’s cookie-consent system can hold it. When it is, your AI will write the exact tag bernard permits on a preview, and you approve it before it goes live.
- Is Cloudflare Turnstile safe on my site?
- bernard admits it only from its own published address, with its settings written as plain data rather than code. Cloudflare Turnstile comes from the maker’s own address, always at whatever version they currently publish, so there is no pinned version here for bernard to check overnight. Keeping it current is the maker’s job. What bernard controls is the address: nothing else may be loaded in its place. It stays off until bernard’s cookie-consent system can hold it.
- What do I need from Cloudflare Turnstile first?
- A Turnstile site key from your Cloudflare dashboard.
- Can I change it later?
- Yes. Say what you want different and your AI redoes it on a preview for you to approve. Nothing about it is baked in.