Integration still required: connect a backend so submissions are stored in a secure contact_messages table and email notifications are sent for form submissions only. Until then this form validates input and hands off to your email client — it never shows a false success message.