Customize the widget

Colour, text, placement, who sees the button, form fields, screen capture and developer tools.

Updated October 2026

Open a project and go to Widget in the project sidebar. Changes apply to your site right away, no snippet change needed.

Button

  • Button and widget colour (hex) and Text (default "Report issue").
  • Placement: Middle right (default), Middle left, Bottom right, Bottom left, Top right or Top left.
  • Audience: Everyone, or only logged-in members and guests.
  • Where it shows: on every page with the snippet; only when a secret URL parameter is added (default ?bug or ?feedback, or your own); or hidden. A hidden button can still be opened with Cmd/Ctrl+I.

Show it only to your team

Set the where-it-shows option to the secret URL parameter. Reviewers visit yoursite.com/?feedback and the button appears for them only.

Guest and member forms

Choose which issue types appear and which fields each form asks for: Title, Priority, Assignee, Due date and tracker-specific fields. Each field can have a custom label, a preset value, a required flag and a drag-and-drop order. By default guests see only Title, and members see Title, Priority, Assignee and Due date.

Screen capture

  • Basic Auth: credentials for sites behind an HTTP login popup, so server-side screenshots can load them.
  • Browser screenshots: use the browser's own screen capture (the reporter approves a one-time prompt).
  • Capture login-only images: include images that need a login to load.
  • Video Feedback: up to 3 minutes, desktop only (Agency).
  • Allow text edit suggestions: lets reporters select text on your site and suggest a replacement. On by default.
  • Session Replay: the last 30 seconds before submit (Pro or above).
  • Private data masking (Agency): add the class .sf-exclude to hide an element, .sf-mask to mask it, or .sf-unmask to show it. Password fields are always hidden.

Developer tools

  • Console logs: on by default, last 100 entries.
  • Network requests (Pro or above): failed requests only, up to 50, bodies cut at 2,000 characters. Use Hidden keys (default username, password, token) and Skipped domains (wildcards allowed) to keep sensitive data out.
  • Custom metadata (Agency): attach your own data via Pinmarks.setMetadata().

Allowed domains

Under Settings → General you can allow the widget on any website or only on your listed domains. Subdomains are allowed, and signed-in team members are never blocked.

Still stuck?

Email support@pinmarks.io and we'll get back to you within one business day.