Getting started
- Create your account and enter the website where the widget will be installed.
- Verify that you control the domain.
- Copy the installation snippet from Dashboard → Integration.
- Paste it into your website where reviews should appear.
- Open your review form and share its link with customers.
Accounts and plans
One owner account signs in with its work email and password. A workspace represents one website and contains its domain, public widget credentials, business identity, reviews and saved style.
Free
One website, the standard widget design and up to 50 new review submissions each calendar month. Previously published reviews remain visible after the limit is reached.
Premium · €19/year
One website, unlimited review submissions and the complete Style Tool.
Agency · €45/year
Unlimited review submissions, the complete Style Tool and three website slots, including the Agency's main workspace. Extra website slots cost €5/year each.
Each Agency website is isolated in its own workspace with a separate domain, logo, reviews, widget credentials and styling. The Agency account owner controls all workspaces and receives their enabled notifications.
Verify your domain
The dashboard gives you a verification value and exact file location. Create this text file on your website:
https://your-domain.example/.well-known/revieer-verification.txtPaste only the supplied verification value into the file, make it publicly accessible, then select Check verification file. If you change the connected domain, verify the new domain before its widget can go live.
Install the widget
Copy your personal snippet from Dashboard → Integration. It already contains the correct App ID and public key.
<div id="revieer-container"></div>
<script src="https://revieer.com/widget.min.js"
data-app="YOUR_APP_ID"
data-key="YOUR_PUBLIC_KEY"
data-size="auto"
data-form="true"
data-lang="en"></script>Place the snippet in the page body where the widget should appear. On WordPress, Shopify or another site builder, use a Custom HTML or Embed block that permits scripts.
Widget options
data-size="auto"automatically chooses cards or carousel.data-size="small"shows a compact card layout.data-size="large"uses the carousel layout.data-lang="en"ordata-lang="ro"changes widget labels.data-targetconnects the script to a custom container when a page contains multiple widgets.
Do not edit data-app or data-key. Use Copy snippet again if either credential changes.
Reviews and email verification
Use Open review form from the dashboard or enable the submission action in the widget. A reviewer supplies a name, valid email address, rating from 1 to 5, and at least 10 characters of review text. The form may also associate the review with the page where it was submitted.
Verification workflow
- revieer emails the reviewer a six-digit verification code.
- The code expires after 10 minutes and allows at most five unsuccessful attempts.
- Until the correct code is entered, the review remains private and cannot appear publicly.
- After verification, the review is either published automatically or placed in the moderation queue, according to the service configuration shown in the dashboard.
The reviewer's email address and verification information are never returned by the public widget. Public output contains only the review identity, author, rating, text, date, verification state and optional source page.
The public widget loads at most 20 published reviews per request. The dedicated public reviews page can show up to 100. Removed or rejected reviews stop appearing publicly.
Use the dashboard
- Overview shows recent activity and live reviews.
- Websites creates and switches Agency workspaces.
- Brand changes the public business name and logo.
- Integration contains the widget snippet, connected domain and public key.
- Reviews lets you search and manage collected feedback.
- Review sources connects Google Business Profile, Google Play and Apple App Store reviews.
- Email preferences controls optional owner notifications and newsletter consent. Security and reviewer verification emails always remain enabled.
External review sources
Premium and Agency accounts can open Review sources and connect profiles they are authorized to manage. Imported reviews are published in the selected workspace, synchronized automatically and clearly attributed to their original provider. They show a Google Verified, Google Play Verified or Apple Verified source badge instead of the revieer email-verification badge.
Google Business Profile
- Select Connect Google Business.
- Authorize the Google account that manages the location.
- If the account has multiple locations, select the one that belongs to this workspace.
The Google Cloud project used by revieer must be approved for Business Profile APIs and must enable Account Management, Business Information and Google My Business APIs. Its OAuth web client must include https://revieer.com/integrations/google/callback as an exact authorized redirect URI.
Google Play
Enter the Android package name, such as com.company.application, then authorize a Google account with access to that application in Play Console. The Google Play Android Developer API must be enabled for the OAuth project. Google Play's API supplies only reviews created or modified during the previous week; automatic synchronization lets revieer retain new reviews from then on.
For older reviews, open Play Console, choose Download reports → Reviews, select the app, year and month, and download the detailed monthly CSV. In revieer, choose the matching connected Android app under Import Google Play CSV and upload the original file. UTF-16 and UTF-8 exports are accepted. Import each required month; uploading the same report again updates matching entries instead of duplicating them. Google does not include reviewer names in this report, so these entries are attributed to “Google Play user.”
Apple App Store
Create an App Store Connect API key that can read app information and Customer Reviews. Enter its Issuer ID, Key ID, the numeric App Store app ID and the complete contents of the downloaded .p8 private key. Apple only lets you download that key once. Keep a secure backup and revoke it in App Store Connect if it is ever exposed.
Synchronization and moderation
Sync now refreshes a source immediately. The server also refreshes connected sources in the background according to its configured interval. Provider review IDs prevent duplicates. CSV rows use the ID in Google's Review Link or a stable report identifier when that link is absent. A previously rejected imported review remains rejected after synchronization. Disconnecting a source also removes reviews imported through that connection.
Email preferences
Open Email preferences from the dashboard sidebar to control owner notifications for new verified reviews, monthly review limits, website and workspace updates, and the revieer newsletter. Agency preferences apply to notifications produced by all client workspaces.
Password resets, password-change alerts and reviewer verification codes are essential service and security messages and cannot be disabled. Stripe controls its own payment receipts, invoices and subscription messages.
Logo and business name
Open Dashboard → Brand to change the name customers see. Logo uploads accept PNG, JPEG and WebP files up to 3 MB. Use the visual editor to choose a square or wide crop, reposition the image and adjust zoom before saving.
Customize with Style Tool
Premium and Agency accounts can control layout, review count, spacing, colors, typography, shadows, animation, responsive behavior and individual cards. Changes save automatically after a short pause; the status indicator confirms when saving is complete.
Reset styles restores the default widget after confirmation. The Free plan continues to use the standard revieer design.
Plan and billing
Open Plan & billing to view the current plan, subscription status, renewal date, monthly usage, Agency capacity and invoice history when enabled. Checkout, recurring payment details and card information are handled by Stripe; revieer does not receive complete card numbers.
Paid subscriptions renew annually until canceled. Cancellation is scheduled for the end of the paid period, so access remains available until that date. When Premium ends, the workspace moves to Free and its custom style is removed. When Agency ends, the main workspace moves to Free, its custom style is removed, and client workspaces are deactivated.
Additional Agency slots are billed annually and Stripe may invoice prorated changes immediately. A different paid plan can be purchased after the current subscription is canceled and has ended.
Rotate your public key
Rotate the key only if the current embed must be revoked. The old widget code stops working immediately. After rotation, select Copy snippet and replace the old snippet on every connected website.
Security model
revieer combines email verification, domain ownership proof, signed and revocable public widget keys, protected account sessions, CSRF checks, request limits and bot protection. Production traffic uses HTTPS security headers, and public widget content is rendered as text inside an isolated Shadow DOM.
The App ID identifies a workspace but does not authorize access by itself. The matching public key and verified hostname are also required. Public keys are designed to appear in website source and can be rotated; account passwords, Firebase credentials, Stripe secrets and SMTP credentials must never be placed in frontend code.
Account protection
Passwords are stored as one-way hashes. Password-reset links are single-use and expire, changing a password invalidates older sessions, and authenticated changes require a session-specific security token. Session cookies are HTTP-only, SameSite-protected and HTTPS-only in production.
Cookies and consent
Essential session cookies keep signed-in areas secure. The consent banner appears after three seconds on the homepage and immediately on other pages when no preference exists. Optional analytics are loaded only after acceptance; choosing Essential only keeps them disabled. The choice lasts up to one year and can be reset by clearing revieer.com site data. See the Cookies Policy.
Review and widget protection
Review text is length-limited and never inserted into the widget as executable HTML. Verification codes expire after 10 minutes, failed attempts are limited, public requests are rate-limited, and production widgets are restricted to their verified hostname. Rotating a public key invalidates its previous embed immediately.
Report a concern
If you suspect abuse or unauthorized access, rotate the affected public key, change the account password and contact contact@revieer.com.
Data and external infrastructure
Production account records, workspace settings, email preferences, reviews and authenticated sessions are stored in a managed external Firebase/Firestore database rather than a local JSON database on the website server. This allows the application and its session state to survive normal application restarts and deployments.
Stripe processes checkout, subscriptions, payment methods and invoices. The configured SMTP provider delivers transactional email, and Cloudflare Turnstile provides anti-abuse checks on public forms. Uploaded logo files are processed by revieer and stored with the deployed application unless the hosting setup provides separate persistent file storage.
Customers do not need database or service-account credentials to install the widget. Those credentials remain server-side. See the Privacy Policy for the information processed and the relevant service providers.
Public widget API
The supported integration is the generated widget.min.js snippet. The script requests published reviews from GET /connect using the workspace App ID, signed public key, widget size, language and form preference. A successful response contains public workspace details, safe review fields and normalized display options.
Typical failures are 403 for an invalid key or unauthorized hostname, 404 for an unavailable or unverified workspace, and 429 when request or submission limits are exceeded. Do not call private dashboard routes from customer websites; they require an authenticated session and CSRF token.
Common problems
The widget says it is unavailable
Confirm the domain is verified, then copy the newest snippet. In production, the widget must run on the exact hostname shown under Connected domain.
No reviews appear
Make sure the reviewer completed email verification and, when moderation is enabled, that the owner approved the review. Refresh after one minute because public widget responses may be briefly cached.
The verification email does not arrive
Check the spam or promotions folder, confirm the submitted address is correct and wait a few minutes. If the issue persists, contact revieer support; never ask a reviewer to publish their verification code.
The public key is invalid
The key was probably rotated. Replace the complete website snippet with the latest version from Dashboard → Integration.
Domain verification fails
Open the verification-file URL in a private browser window. It must use HTTPS and return only the exact value displayed by revieer, without HTML, redirects or login protection.
The widget does not appear in a site builder
Use a block that allows custom JavaScript. Some builders remove script tags from ordinary text blocks or block third-party scripts through their content security policy.
A Free account cannot accept another review
The monthly limit of 50 new submissions has been reached. Wait for the next calendar month or upgrade from Plan & billing.
Style changes look old
Wait until the Style Tool says all changes are saved, then refresh. Cached widget data can take up to one minute to update.
I lost access to my account
Use Forgot password. Reset links are single-use and expire after the period stated in the email. Changing the password invalidates older authenticated sessions.