Access Control

Manage who can access your store by creating blacklist and whitelist rules. Block unwanted visitors or ensure specific users always have access.

Overview

Access Control lets you:

• Block visitors by IP address, country, city, or visitor ID
• Allow visitors to bypass any restrictions
• Track blocked attempts to monitor security
• Manage rules easily through an intuitive interface

Understanding Lists

Blacklist

Rules that block matching visitors from being tracked. Use this for:

• Known bad actors
• Competitor surveillance
• Bot traffic
• Specific geographic regions

Whitelist

Rules that always allow access, even if other rules would block. Use this for:

• Your own team members
• Trusted partners
• Testing accounts
• Specific geographic regions you want to ensure have access

Note: Whitelist rules take priority over blacklist rules.

Rule Types

IP Address

Block or allow specific IP addresses:

• Single IP: 192.168.1.1
• CIDR notation for ranges: 10.0.0.0/8

Example use cases:

• Block known spam IPs
• Whitelist your office network
• Block VPN ranges

Country

Block or allow entire countries by name:

• Example: Russia , Nigeria , China

Example use cases:

• Block regions where you don't ship
• Focus on specific markets
• Comply with regional regulations

City

Block or allow specific cities:

• Example: Lagos , Moscow , Mumbai

Example use cases:

• Block cities with high fraud rates
• Target specific local markets

Visitor ID

Block or allow specific visitors by their unique ID:

• Example: abc12345

Example use cases:

• Block a specific problem visitor
• Whitelist your testing account

Adding a Rule

1. Click Add Rule button
2. Select List Type:
   • Blacklist (Block)
   • Whitelist (Allow)
3. Choose Rule Type (IP, Country, City, or Visitor ID)
4. Enter the Value
5. Click Add Rule

Managing Rules

Viewing Rules

• Use tabs to switch between Blacklist and Whitelist
• Filter by type to find specific rules
• Search to find rules by value

Selecting Multiple Rules

• Click the checkbox next to individual rules
• Use "Select All" to select all visible rules
• Selection bar shows count and actions

Deleting Rules

• Single rule: Click the delete icon on the rule row
• Multiple rules: Select rules and click "Delete X rules"

Warning: Deleted rules take effect immediately. Blocked visitors matching deleted rules will be able to access your store again.

Statistics

The dashboard shows:

• Total Blocked - Number of visits blocked by your rules
• Blacklist Rules - Total blacklist rules (and active count)
• Whitelist Rules - Total whitelist rules (and active count)
• Protection Status - Current protection state

Best Practices

Start Small

Begin with specific rules before broad geographic blocks. Monitor the "Blocked" count to ensure you're not blocking legitimate customers.

Use Whitelist for Exceptions

If you block a country but have customers there, add whitelist rules for their IPs or visitor IDs.

Regular Review

Periodically review your rules:

• Remove outdated rules
• Check blocked counts
• Adjust based on traffic patterns

Test Before Broad Blocks

Before blocking entire countries or large IP ranges:

1. Review your visitor analytics
2. Check if you have customers from that region
3. Consider the business impact

Rule Priority

When a visitor matches multiple rules:

1. Whitelist rules are checked first
2. If whitelisted, the visitor is allowed
3. Blacklist rules are checked second
4. If blacklisted, the visitor is blocked
5. Otherwise, the visitor is allowed

Blocking from Visitor Profile

You can also add block rules directly from a visitor's profile:

1. Go to Visitors
2. Click on a visitor
3. Click Block Visitor
4. Choose what to block (IP, country, city, or visitor ID)
5. Confirm the action

Related Topics

• Visitors - Managing visitor profiles
• Excluded Visitors - Excluding visitors from tracking
• Settings - General app configuration