Domain allowlist — restrict the widget to your own sites

By default, your widget will accept embeds from any domain that loads the script. If you want to block competitors or scraping copies of your page from showing your branded chat, set a domain allowlist in your dashboard.

How it works

1. Sign in at https://247ch.at/dashboard.php
2. Open the Site that owns the widget.
3. Scroll to Allowed domains and enter one host per line, e.g.:

example.com
www.example.com
app.example.com

Wildcards are supported: *.example.com covers every subdomain.

What happens on a blocked page

When the widget loads on a domain that is not in your list, the bubble does not render and no connection is opened. There is no error popup — visitors simply do not see chat. The relay logs the rejected origin so you can audit it later.

Tips

• Add localhost while testing — remove it before launch.
• If your site uses a CDN that rewrites the host, allowlist the CDN host too.
• Leave the list empty to allow any domain (the default).