Platform administration

The Platform admin area (https://app.trackcrown.com/admin) is for the company that operates the TrackCrown installation, not for networks. Only platform administrators can open it; workspace owners and admins cannot. The first platform administrator is created by the first-run setup page (/setup?token=…, only while no user exists); more are added under Admin → Users with Make platform admin.

Platform administrators have their own account page (Admin → My account, /admin/account) for password and two-factor authentication; 2FA for platform administrators is required by default in production.

Pages at a glance#

Brands#

A brand is a company that runs the installation under its own name: legal identity, colours, website, panel hostname and tracking domains. Each brand applies for Google certification separately. Workspaces belong to exactly one brand, and visitors see the brand of the hostname they open.

Create a brand#

1. Admin → Brands → New brand.
2. Identity: Product name (for example "TrackCrown"), Slug (internal, lower-case), Tagline, Workspace sign-up and Status (Active / Disabled).
3. Legal entity: Legal name (exactly as registered, for example "Web Cue LLC"), Registered address, Company registration (for example "Delaware State File No. 1234567"), Country of incorporation (two-letter ISO code).
4. Contact: Support e-mail, Privacy e-mail (shown in the privacy policy for data-subject requests), Phone. Google requires an e-mail address on the company's own domain for the certification application.
5. Appearance: Primary colour, Accent colour, Logo URL, Favicon URL.
6. Save, then add the brand's hostnames on Admin → Domains.

Workspace sign-up controls how new networks join on the brand's panel:

Legal pages#

A brand's page has the tabs Profile & appearance, Legal pages and Domains. Legal pages generates the privacy policy, terms, data processing agreement and cookie notice from the brand's legal details. You can override the privacy policy, terms and DPA with your own Markdown (the preview shows "Preview (override)"); the cookie notice is always generated.

Workspaces#

Admin → Workspaces lists every customer network across all brands. Filter by Status (Pending approval, Active, Suspended) and Brand. Row actions:

Domains#

Admin → Domains lists every hostname served by the installation. Filter by Brand, Kind (Tracking, Panel, Marketing) and DNS (Pending DNS, Active, Disabled).

Add a domain with Hostname (without https:// or a path), Brand, Kind, Scope (Brand-wide or one workspace, tracking only), Initial status and Default for this brand and kind ("Used to build links and absolute URLs."). Row actions: Check DNS now, Status & default…, Certification… (tracking domains) and delete.

Certification… records the Google certification of a tracking domain: Status (not_applied, preparing, applied, certified, rejected, revoked), Applied on, Decision on and Notes. Only platform administrators can change it; workspaces see it in the Certification column of Tracking → Tracking domains. Workspace-level domains are described in Tracking domains.

Users#

Admin → Users lists every account across all brands and workspaces. Filters: Platform admins, Active, Disabled, 2FA enabled, 2FA off. Row actions:

You cannot remove your own rights, disable yourself or reset your own 2FA here.

Contact messages#

Messages from the brand websites' contact forms (/contact), filterable by Status (Open, Handled) and Brand. Use Mark handled when a message is answered (Reopen undoes it; Delete removes it). Messages are deleted automatically 24 months after they were handled (or received, when never handled).

Sign-up protection#

CAPTCHA for public sign-up forms (partner and advertiser applications) on every brand:

1. Choose the provider: Off, Cloudflare Turnstile ("Privacy-friendly, usually invisible") or hCaptcha ("Image challenge when needed").
2. Enter Site key and Secret key (stored encrypted; leave empty to keep the stored one).
3. In the provider's dashboard, add every panel hostname of your brands as an allowed hostname.
4. Click Save.

The check is verified server-side on every application; a failed or missing check refuses the sign-up. Workspaces can switch the CAPTCHA off for their own forms (Partners → Partner program → Sign-up form → CAPTCHA on the application form); see Partner sign-up.

System#

Admin → System shows versions, service health, configuration sanity and storage usage — secret values are never shown. It includes the ClickHouse mirror lag ("In sync" when caught up), queued postbacks, active sessions, a list of configuration items that need attention, ClickHouse and PostgreSQL table sizes, and the latest clicks of all workspaces in the last 7 days.

E-mail templates#

Override the wording of system e-mails per brand; links, sender and layout stay managed by the platform.

Choose the brand, edit the subject and body and save. In the body, blank lines separate paragraphs; a paragraph starting with Button: sets the button label and one starting with Footer: sets the footer text. Variables the template does not define are flagged as warnings. Other e-mails (alerts, scheduled reports, partner messages, invoices) are not editable here.

Unattributed postbacks#

Conversion requests (/pb, /postback, /conversion, /px, /lp) are filed under the workspace their token, offer, click or tracking domain names, and appear in that workspace's Received tab. Requests that name none — no token or an unknown one with no known offer or click, malformed requests, pixels and landing-page SDK calls sent to a shared tracking domain — are listed here, with the same columns, Result filter and search as the Received tab, for 90 days. See Inbound postback log.

Overview#

The overview page shows platform-wide KPIs for "today" in the platform time zone, a chart of clicks over the last 24 hours, Pending approval workspaces and open Contact messages, each linking to its page.