Web3Forms alternative, GDPR compliant
Web3Forms uses the same field names as Mailiy: access_key, botcheck, subject, redirect. Switching usually means a new action URL and a new key. The difference is privacy. According to its own privacy policy Web3Forms is based in India, and it names servers in the USA.
Mailiy and Web3Forms compared
| Feature | Mailiy | Web3Forms |
|---|---|---|
| Operator | 26LAB.IO, Mettmann (Germany) | Operator in India |
| Server location | Hetzner in Germany, own mail server | USA (US-East) according to the FAQ |
| Storing submissions | Encrypted, retention of your choice down to “Don't store” | Contradictory: the FAQ says none, the privacy policy names up to 3 years |
| Free | 100 submissions a month, 1 website | 250 submissions a month |
| Paid plans | From €9 a month | Not stated |
| Spam protection | Honeypot, rate limits, content filter, optional captcha (self-hosted ALTCHA, hCaptcha, Turnstile, reCAPTCHA) | Not stated |
| File uploads | Up to 5 files, 10 MB, encrypted in the EU | Not stated |
| Webhooks | From Developer | Not stated |
| DPA under Art. 28 GDPR | Concluded when you sign up | None; the FAQ makes no statement on the GDPR |
As of 2 November 2026, based on the provider's public pages. Prices and plans change, so check them there before you switch: web3forms.com, web3forms.com/privacy.
When Web3Forms is the better fit
- You need more than 100 free submissions a month.
- Your website does not target people in the EU.
Switch from Web3Forms to Mailiy
- Create a free account and copy your form's key.
- Replace the fields in your form using this table:
| Web3Forms | Mailiy |
|---|---|
action="https://api.web3forms.com/submit" | action="https://mailiy.com/api/submit" |
access_key | access_key |
subject | subject |
redirect | redirect |
botcheck | botcheck |
from_name | from_name |
replyto | replyto |
Every control field is listed in the docs, and setup steps for your platform are in the guides.
Before you cancel
- After the change, send a test message and check that it reaches your inbox and the dashboard.
- Enter the domains the form may send from in the dashboard.
- If you used webhooks or Zapier flows with Web3Forms, set them up again in Mailiy. Slack, Discord and Telegram are built in; everything else runs through a webhook.
- Update your privacy policy and name Mailiy as the recipient of form data.
- Cancel Web3Forms only after the new form has run for a few days without problems.
What matters when comparing
Server location and operator
A contact form transfers names, email addresses and often more. If the provider sits outside the EU or stores data there, you need a legal basis for the transfer to a third country and have to name it in your privacy policy. With a provider based and hosted in Germany, that step goes away.
Storage
Many services keep every submission so you can see it in a dashboard. That is handy, but it adds to the data you have to protect and delete at some point. Check whether you can set the retention yourself or switch storage off entirely.
Limits on the free plan
The number of submissions is rarely the problem. More often the free plan lacks uploads, custom redirects or a way to remove the branding. Check which feature you actually need before you decide on price.
Spam protection
A honeypot stops most bots without visitors noticing. Captchas help against persistent spam but cost conversions and often load third-party scripts. A good service lets you add a captcha only when you need one.
What else a contact form needs for the GDPR is covered in the GDPR checklist.
Frequently asked questions
Where are Web3Forms's servers?
USA (US-East) according to the FAQ. Mailiy: Hetzner in Germany, own mail server.
How much does Web3Forms cost?
Free: 250 submissions a month. Paid: Not stated. As of 2 November 2026.
Do I have to rebuild my form to switch from Web3Forms?
No. You change the action URL, add the access_key field with your key and rename the control fields as in the table above. Your own fields stay as they are.
Can I bring my old submissions over from Web3Forms?
Mailiy doesn't import old submissions. Export them from Web3Forms before you cancel if you need to keep them, and store the file separately. Mailiy collects new submissions from the first test on.
Do I need a new DPA with Mailiy?
Yes, because Mailiy processes your visitors' data on your behalf. The DPA is concluded when you sign up, so there is nothing to print or sign. In your privacy policy, replace the old provider with Mailiy.