Any rate limits apart from Google's? Looks very neat.
Only to prevent abuse at the moment, and hopefully, it will stay that way. The free model relies pretty heavily on donations from users, but I don't see the cost being an issue anytime soon.
how does the api handle auth though?
It doesn't! It's simply filling out the public version of the form, which shouldn't require authentication.