What is the turnstile limit based on? Client-side use or server-side checks?

As topic suggests, when utilizing Turnstile, is the limit set for client-side use; so if a client turns on a page and starts spamming window.turnstile.reset() will that count towards the limit or is the limit based on me performing the server check?

If documentation could be updated to mention how limit is calculated that’d be great.

I found the answer to my own question, I had over-read the availability. The limitation is against my server-sided requests. So a user could refresh billions of times and only when I perform verify is it counted.

1 Like