Restrict which sites can embed a player
Also asked as: domain restrictions · allowed domains · someone copied my embed code · whitelist my site · lock to my website
Anyone who can see your embed code can paste it into their own page. Domain Restrictions stops that: the player only runs on the domains you list.
Two places to set it
- Account settings — a default list that applies to all your players
- The player — its own list, which overrides the account default for that player
In a player's Domain Restrictions section, choose Inherit from account to use the account default, or Set custom domains to give this player its own list.
Writing the list
- One domain per line, for example
example.com - Use
*.example.comto allow every subdomain - Leave the list empty to inherit from account settings
Effective Domains shows which list is actually in force: restricted by this player, restricted by account settings, or no restrictions at all.
With no restrictions set anywhere, the player runs on any site that embeds it — and every search it answers counts against your allowances. Setting at least an account-level list is worth doing.