Share links

Share links give anyone with the URL read-only access to a single site's dashboard. No account, no login, no password on the recipient's side. You send a URL, they open it, they see the same panels, filters, and date ranges that you see. Useful for clients, stakeholders, contractors, and anyone you want to keep in the loop without onboarding them as a real user.

Share links are off by default, per-site, and managed from /<domain>/settings/sharing. Owners, admins, and editors can create or revoke them. Viewers can see which links exist, but the URLs themselves stay hidden from read-only roles: a share link is a credential, and its value never leaves the server for anyone who cannot manage it.

What the recipient sees

When someone opens a share link, the dashboard loads in read-only mode. They see:

• All KPIs, panels, the hourly chart, and the realtime view for that one site.
• All date ranges, comparison periods, and filter dimensions.
• Goals, custom events, ecommerce revenue, and the sessions panel.
• The site's favicon and domain name in the dashboard header.

They do not see:

• The site switcher. Only the one site behind the link is visible.
• Account, billing, security, danger zone, or any settings pages.
• Your name, email, plan, pageview usage, or any other account-level information.
• Other sites on your account.

Recipients can still apply filters, change the date range, drill into sessions, and export reports. These actions are local to their browser; they do not write anything back to your account.

Share links carry the full view state. The dashboard URL always reflects what is on screen: the date range, active filters, and which panel tabs are open. So while viewing a shared dashboard, copying the address bar (or using ⌘K → "Copy link to this view") produces a link that opens on that exact screen for the next person. A freshly created share link with nothing appended simply opens on the defaults.

Creating a share link

Open /<domain>/settings/sharing and click Create share link. A new entry appears in the list with a one-click copy button. The URL format is:

https://clickport.io/share/<domain>?auth=<token>

The token is 12 hex characters generated server-side with a cryptographic random source. Each link gets a unique token, and tokens are never reused after revocation.

Password-protected links

Optionally set a password when creating a link. Recipients who open the URL see a password prompt instead of the dashboard, and nothing loads until they enter it. The password is checked server-side on every request, not just at the front door: the URL alone never grants access.

• Passwords are 6 to 128 characters and stored as a bcrypt hash. We cannot show it to you again.
• The password is set at creation and cannot be changed later. To rotate it, revoke the link and create a new one.
• After a correct entry, the browser stays unlocked for 24 hours via a secure cookie.
• Password attempts are rate-limited per IP address.

Limiting a link to a segment

If you have saved segments, you can bind a share link to one. The recipient then only ever sees data matching that segment: a client sees their campaign, a country manager sees their region, and nothing else.

• The segment's filters are enforced server-side on every query. Viewers can add their own filters on top to drill down, but can never remove or widen yours.
• The locked segment shows as a small labelled badge in the shared dashboard header, so viewers know the view is scoped.
• If you delete the segment later, the link stops working entirely rather than silently showing unscoped data.
• Password protection and segment limiting combine freely on the same link.

Embedding a dashboard

Any share link without a password can be embedded on your own site with an iframe. This embeds the full dashboard. If you only want a small stat badge (a visitor count in your footer or sidebar), use the embed widget instead. Next to each link in the share links list there is a Copy embed code button that produces a ready-to-paste snippet:

<iframe src="https://clickport.io/share/<domain>?auth=<token>&embed=true&theme=system"
  loading="lazy" style="width: 100%; border: none; height: 1600px;"></iframe>

In embed mode the dashboard drops its branding and read-only badge; viewers still get the full panels, date ranges, and filters. Two optional URL parameters control the look:

• theme - light, dark, or system (follows the visitor's OS preference). Default: the visitor's own setting.
• background - any CSS color for the page background, including transparent to blend into your site.

Password-protected links refuse to load inside an iframe. Browsers do not carry the unlock cookie into embedded contexts, so instead of a half-working dashboard you get a clear message. Use an unprotected link (optionally segment-limited) for embedding; the segment lock is enforced server-side either way.

Revoking a share link

In the list, click Revoke next to the link you want to disable. The button asks once more (red Revoke?) and then the link is killed immediately. Anyone holding the URL will see "Share link not found or has been revoked" on their next page load.

Revocation is permanent. The token cannot be reactivated. If the same recipient still needs access, create a new link.

Limits

• 10 active links per site. Once you hit the limit, the Create share link button is disabled and labelled "Limit reached (10)". Revoke unused links to free up slots.
• One site per link. A link only ever resolves to a single site. To share two sites, create one link per site and send both URLs.
• No expiry. Share links do not auto-expire. They stay valid until you revoke them. Plan to revoke at the end of an engagement rather than relying on time-based expiry.

Security

A few things to know about how share links are secured on Clickport's side:

• Token entropy. Each token is 12 hex characters, 48 bits of entropy. Even at sustained brute-force rates against the public resolve endpoint, finding a valid token would take longer than is meaningful.
• Rate limiting. The public token-resolve endpoint is capped at 30 requests per minute per IP. Enumeration attempts get throttled fast.
• No personal data exposure. The resolve endpoint returns only the site's id, domain, timezone, and favicon. It does not return owner email, plan, or any account-level information.
• Revocation is real. Revoked links return 404 on the resolve endpoint, so even cached frontends fail to load data on the next request. There is no client-side trust.

If you suspect a link has been leaked or distributed beyond its intended audience, revoke it and create a new one. The new URL will have a different token; the old one stays dead forever.

Common uses

• Client reporting. Each client gets one link for their site. They check the numbers on their own schedule. See the Agencies page for the full agency workflow.
• Internal stakeholders. Drop a URL into a Slack channel so non-technical teammates can pull numbers without creating accounts.
• Contractors and freelancers. Give time-bounded visibility during an engagement. Revoke when the work ends.
• Read-only on your own devices. A share link works without a session, so you can pin one in a kiosk browser, a TV dashboard, or a status display without leaving a logged-in session running.