Skip to main content

​
Allowed websites

Your Workspace ID is public, so by default any website can show your chat. To stop that, add your websites in Integrations → Website chat → Install.
  • A website also covers its subdomains, so example.com allows shop.example.com.
  • Your chat link and localhost always work, so you can keep testing.
  • On any other website the chat doesn’t appear, and the browser console explains why.
  • Bookings follow the same list. Anywhere else, our booking form says it isn’t set up for that website.
This stops other websites from embedding your chat. It isn’t a login, so keep private data out of track().

​
Content Security Policy

If your site sets a Content Security Policy, allow:
  • img-src https: covers pictures in your News posts, which can come from any address.
  • style-src 'unsafe-inline' is needed because the chat’s styles live inside its own Shadow DOM, where your site’s CSS can’t reach them.
The booking form on its own needs less:
The chat and the booking form can sit on the same page.