Email obfuscator
Turn an email address into code that people see normally but simple scrapers can't read. Runs entirely in your browser: nothing is sent anywhere.
Published Updated
Better still: don't put your address on the page.
GoodInbound is a form backend and lead screen for any form. It:
- A GoodInbound form posts to an endpoint, so there's no address in your HTML to harvest.
- Every submission is screened for bots and sales pitches before it reaches you.
- Leads are labeled, enriched, and sent to email, Slack, or Telegram.
- Works with plain HTML, React, Next.js, and any site builder that sets a form action.
Which method should you use?
- HTML entities: easiest to paste anywhere and keeps the link clickable. Stops scrapers that read raw HTML; smarter ones decode entities.
- JavaScript link: builds the address in the browser, so scrapers that don't run JavaScript never see it. The link doesn't show for visitors with JavaScript off.
- CSS reversed text: the address is stored backwards and flipped by CSS. Good for display, but it can't be a clickable link, and copying it gives the reversed text.
Does email obfuscation still work?
Partly. Obfuscation stops the cheap scrapers that pull every address out of raw HTML, which is most of them. It doesn't stop scrapers that render pages like a browser, and it does nothing once your address is in a data breach or a purchased list.
If you're hiding your address because of spam through your website, the bigger source is usually the contact form itself: bots and people pitching services. Obfuscation can't help there. Screening each submission can.
Questions
Writing an email address in a form that browsers display normally but simple scrapers can't read, such as HTML character codes, a link assembled by JavaScript, or text reversed with CSS.
No. The obfuscator runs entirely in your browser.
Similar idea. Cloudflare rewrites addresses on pages it serves and decodes them with JavaScript. This tool gives you the code to use on any host.
A contact form that posts to a form endpoint. There's no address in your page at all, and with screening you also avoid the spam that comes through the form.