Updated: Jul 17, 2025
Security settings for your website
Security settings for your publication are managed within the Website Builder, where you’ll find the ability to enable a cookie banner and display your ToS and Privacy Policy for GDPR and CCPA compliance. You can also add a custom ToS link and configure subscriber login options to give you more control over access and privacy.
How to enable GDPR and CCPA compliance
- From the left panel dashboard, go to Website > Builder.
- The Website Builder will open with a preview of your site on the canvas. In the upper-right corner, click on the Settings icon to open your website settings.
- Your site settings will open on the General page. In the left column, click GDPR, CCPA, & Compliance.
- On this page, you can toggle the following options on or off. Changes are saved automatically.
Show Cookie Banner: Enable this to display a cookie banner when someone first visits your site. This allows users to opt out of non-essential cookies.
Signup ToS & Privacy Policy: Enable this to require subscribers to agree to your Terms of Service and Privacy Policy before subscribing by checking a consent box.
- (Optional) You also have the option to provide a custom terms of service link for your readers. To do so, add a URL to the Terms of Service text field. This URL will be accessible if the cookie banner is enabled on your website. Changes will be saved automatically.
How to configure subscriber login options
- From the left panel dashboard, go to Website > Builder.
- The Website Builder will open with a preview of your site on the canvas. In the upper-right corner, click on the Settings icon to open your website settings.
- Your site settings options will open on the General page. In the left column, click on Login.
- On this page, you can enable or disable the following login options for your subscribers. Changes are saved automatically when toggled.
Use one-time password for login: Enable this to allow subscribers to log in to your publication site using one-time passwords instead of magic links.
Use subscriber password for login: Enable this to let subscribers create and use a password to log in directly on your publication site.
One-time password (OTP) enabled subscriber view
This is what your subscriber will see if you have OTP and subscriber password enabled for your account:
Both OTP and password disabled subscriber view
If both OTP and subscriber password options are disabled, users will receive a magic link in their email to access your publication as a logged in subscriber.