Skip to main content

Restrict which domains can display your survey

Limit Embed, in-app, and Feedback Button surveys to the websites you choose

Written by Alex Bitca

Each Embed, in-app, and Feedback Button campaign has a Survey allowed domains list. When the list has entries, the survey loads only on pages from those domains. Requests from any other website are refused: the survey does not appear, no response is recorded, and no contact is created in your Retently account.

Use it to make sure your survey runs only on your own website or web application, and that a copy of your installation script placed on someone else's site cannot be used to send fake responses or contacts into your account.

How the list works for each campaign type

Campaign type

Where to find the setting

When the list is empty

Embed survey

Trigger tab

The survey does not load anywhere. At least one domain is required.

Regular in-app survey

Schedule tab

The survey loads on any website where the script is installed.

Transactional in-app survey

Trigger tab

The survey loads on any website where the script is installed.

Feedback Button

Schedule tab

The button loads on any website where the script is installed.

For in-app and Feedback Button campaigns, the list is optional, and the list itself is the switch: add a domain to turn the restriction on, remove every domain to turn it off. A note above the field tells you which state the campaign is in.

For Embed campaigns, the list is required. Until you add a domain, a warning icon appears on the Trigger tab and the survey does not display.

Add an allowed domain

  1. Go to Campaigns and open the campaign.

  2. Open the Trigger tab (Embed and transactional in-app campaigns) or the Schedule tab (regular in-app and Feedback Button campaigns).

  3. In the Survey allowed domains section, type a domain, for example app.example.com.

  4. Click Add (or press Enter). The domain appears as a tag above the field.

  5. Repeat for every domain where the survey should appear.

  6. Click Save campaign.

To remove a domain, click the × on its tag, then click Save campaign.

You can paste a full address such as https://www.example.com/pricing?ref=1. Retently keeps only the domain (www.example.com) and drops the protocol, port, path, and query.

The list belongs to the campaign, not to your account. If you run several in-app or Feedback Button campaigns on the same website, set the list on each one.

Which addresses match

Retently compares each entry with the domain of the page where the survey script runs.

Entry

Matches

Does not match

example.com

example.com

www.example.com, app.example.com

www.example.com

www.example.com

example.com

*.example.com

www.example.com, app.example.com, eu.app.example.com

example.com

  • An exact entry matches only that exact domain. example.com and www.example.com are two different domains, so add both if your site uses both.

  • A wildcard entry (*.example.com) matches every subdomain, but not the main domain itself. To cover both, add example.com and *.example.com.

  • Matching ignores letter case, ports, and page paths. The list controls which websites can show the survey, not which pages within a website.

When a page is not on the list, the survey stays hidden. Visitors do not see an error message. If a survey does not appear where you expect it, check that the page's domain is on the list exactly as it appears in the browser address bar, including or excluding www..

Do I need to change my installation script?

No. The allowed domains list is checked by Retently when the survey loads, so the script already installed on your website keeps working as it is.

Related

Did this answer your question?