Domains and URLs for Hosted Pages

Hosted pages use your Link Domain (set in your Account Settings) to rewrite the base URL (or a default domain if none is selected).

For example, if your link rewrite domain is "link.mydomain.com," your hosted pages will be accessible via "link.mydomain.com/pagetype/pagename." See below for specific examples per page type.

To keep up with the requirements of expanding global regulation of privacy, Sailthru has committed itself to a product development framework considering privacy by design and by default. This framework requires that we continually evaluate existing and future product functionality to ensure that privacy is at the forefront of our services. Based on internal evaluation, we have modified the features that passed email addresses as query parameters by default to instead pass information in a hashed format. (November 17, 2020)

Signup Pages

The page is publicly accessible via this URL: [link domain]/join/[pagename]

Example: link.yourdomain.com/join/signup

User Management/Optout Pages

The page is accessible via this URL:

[link domain]/<strong>manage</strong>/[pagename]?email=[email address]&hash=md5([email]+[apisecret])

Example:

link.yourdomain.com/manage/pagename?email=emailaddress&hash=md5(email+apisecret)

Provided the page name is unique,

link.yourdomain.com/pagename?email=emailaddress&hash=md5(email+apisecret)

will also redirect to

link.yourdomain.com/manage/pagename?email=emailaddress&hash=md5(email+apisecret)

When a subscriber reads an email and clicks the unsubscribe link, the link will contain a URL similar to this format:

http://cb.sailthru.com/oc/Taxrz7x-B1FBAABw/61956ebe

The components of this URL are as follows:

http://cb.sailthru.com/ is the link domain.
/oc/ is the page you are viewing. In this case, you're looking at the 'optout confirm' page.
/Taxrz7x-B1FBAABw/ refers to the message the link came from.
/61956ebe is a unique hash generated for security purposes to make sure no one opts out all your users. If the hash and message don't match up, or the message doesn't exist, you'll see an error page.

Formatting user management pages

How do user management pages stay secure?

A private user management page adds a unique hash to the URL, which is required to access the page. This prevents an end user from changing the email address in the URL and accessing another user's page.

When you link to a hosted page, use the following format:

For a hosted page that uses Zephyr, which might be used in a template or from another hosted page, use the following format:
Copy
```
link.yourdomain.com/manage/pagename?email={email}&hash={md5(email+apisecret)}
```
- The 'apisecret' is your API secret. You can find your API Secret in your Settings.
- The API Secret must be added to the Advanced tab of your template. Use the following format: {apisecret='YOUR API SECRET GOES HERE'}
- Note: To protect your account, your API Secret will be encrypted in the HTML.
Note: Previously User Management Pages could be set to ‘public’ or ‘private’. New User Management Pages are ‘private’ by default and this cannot be configured. User Management Pages that were historically set to ‘public’ will remain that way. Contact Support if you would like to set a historic page to ‘private’.