# Fat Kiss Contact Handler

Lightweight Node/Express contact form backend.

## Setup
```bash
cp .env.example .env
# Fill in Turnstile secret, SMTP creds, mail routing
npm install
npm start
```

## Endpoints
- `POST /api/contact` — accepts form submissions with Turnstile verification

## Security
- Rate limiting (5 req / 15 min default)
- Honeypot field
- Turnstile server-side verification
- Input sanitization
- Category allowlist
- CORS locked to getfatkiss.com