Allowed domains

Every website has a list of allowed domains. The relay only accepts events from pages on those domains, so nobody can copy your snippet onto another site and send events into your pixel.

Allowed domains lists every site the relay accepts events from for this website.

Click Add domain to get an empty row.

Type the domain only, without https:// or a path. Subdomains are covered automatically.

Click Save changes. Events from the new domain are accepted straight away.

Next

Done

That is the whole flow. Try it in your own dashboard.

Watch again

1. Allowed domains lists every site the relay accepts events from for this website.

2. Click Add domain to get an empty row.

3. Type the domain only, without https:// or a path. Subdomains are covered automatically.

4. Click Save changes. Events from the new domain are accepted straight away.

1. Step 1: Allowed domains lists every site the relay accepts events from for this website.
2. Step 2: Click Add domain to get an empty row.
3. Step 3: Type the domain only, without https:// or a path. Subdomains are covered automatically.
4. Step 4: Click Save changes. Events from the new domain are accepted straight away.

How domains are matched#

• A domain covers itself and every subdomain. example.com allows www.example.com, book.example.com and shop.eu.example.com.
• It does not work the other way round. www.example.com does not allow example.com. When in doubt, list the bare domain.
• The scheme, port and path are ignored. https://example.com/contact is read as example.com.
• Hosts are compared as whole names, so example.com never allows example.com.other-site.net.

Add or remove a domain#

1. Open the website from Websites.
2. Under Allowed domains, click Add domain and type the domain, or click the cross next to one to remove it.
3. Click Save changes.

The change applies to the next event. A website needs at least one domain.

Events from an unlisted domain#

The relay answers them with 403 Origin not allowed and does not record them. If a site stops showing events after a move to a new domain, add the new domain here. See Events missing in Meta.