Block bots on your PrestaShop 8 store — no friction for real customers.
Zeyvro Turnstile integrates Cloudflare Turnstile into the PrestaShop 8.0 to 9.2 contact, registration, login and password-reset forms, and into prestablog and ps_emailalerts if you use them. It replaces reCAPTCHA with no Google tracking.
What you get
- Protects contact, customer registration, login and password reset, also inside checkout (login, account creation and guest checkout), plus prestablog comments and ps_emailalerts back-in-stock alerts if installed: nothing goes through without a valid Cloudflare token. Each form has its own switch; if you upgrade from 1.1.x, the new ones come off and you turn them on in CUSTOMIZE → Zeyvro → Anti SPAM.
- Three widget modes: Managed, Invisible, and Non-interactive.
- Server-side token validation — client-side bypass impossible.
- Panel notice when a key is missing: while the site key or the secret key is missing, the panel says so and Turnstile can’t be enabled, so your store never ends up unprotected without you knowing.
- Attempt log in the Back Office: IP, user agent, error code and result, with a button to delete entries older than 30 days.
- Configurable API timeout.
- Configurable action on failure: block the submission (default) or let it through and only log it.
What to expect
With the module on, submissions from protected forms without a valid Cloudflare token don’t reach your inbox. The Back Office shows every attempt and its result, so you measure with your own data how much spam it stops.
When you don’t need it (straight answer)
- If your store gets very little traffic and you’ve never had spam through your contact form — the module doesn’t add anything urgent.
- If you already use reCAPTCHA and don’t mind Google tracking or strict GDPR/ePrivacy compliance.
- If you comfortably exceed 1M challenges/month on Cloudflare (very high-traffic stores) — check Cloudflare’s cost above that threshold before migrating.
- If what you’re getting is fake reviews: product reviews aren’t covered.
If you’re getting spam through your contact form, or you want to stop depending on Google for captcha, this pays off — and it’s free.
Free no license · no signup
Requires a Cloudflare account (free up to 1M challenges/month).
Download Zeyvro Turnstile See it first in the demo Real PrestaShop 8 demo — user demo@demo.es · password demodemo. It resets every night, so click around freely.Frequently asked questions
Is it compatible with my PrestaShop version?
Yes, PrestaShop 8.0 to 9.2.
Does it replace reCAPTCHA?
Yes, an alternative that doesn’t send data to Google.
Which forms does it protect?
PrestaShop’s contact, customer registration, login and password-reset forms, also inside checkout (login, account creation and guest checkout), plus prestablog comments and ps_emailalerts back-in-stock alerts if installed. Product reviews aren’t covered.
What happens if Cloudflare has an outage?
Your call: with “Block” (default) the message isn’t sent if it can’t be verified; with “Log only” it’s sent and recorded in the log. The API timeout is configurable.
Does using Cloudflare Turnstile cost anything?
Free up to 1 million verifications a month — covers most stores at no cost.
Is there real data on how much it reduces spam?
We don’t publish a number: it depends on each store’s traffic and bots. The module logs every attempt and its result so you can measure it with your own data.
Can I see it before installing it on my shop?
Yes. We run a real PrestaShop 8 demo with the module installed: go to demo.zeyvro.com/zyadmin, log in with demo@demo.es / demodemo and open the module configuration to see every option (widget modes, action on failure, timeout and attempt log). The demo resets every night, so click around freely.