Install on a plain HTML site

Plan needed: none. Any site where you can edit the HTML.

Where to paste

Add the snippet inside <head> on every page (or in your shared layout/template), then deploy.

<script src="https://{ASSET_HOST}/s/v1/pr.js" data-project="{projectPublicId}" async></script>

Optional: pin it with Subresource Integrity. The build prints the hash; add integrity="sha384-…" crossorigin="anonymous" to the tag. Be aware: pr.js changes every time we release a new overlay (it holds the overlay's file name and hash), so a pinned hash stops matching after each release and the review tools stop loading until you update it. Most sites should leave integrity off; pr.js itself checks the overlay's hash for you.

Cache

Purge your CDN (Cloudflare: Caching > Purge Everything; Netlify/Vercel deploys purge automatically).

Build tools

Do not bundle, inline or minify our script into your own bundle. Keep the tag as is so the checker can see it and updates stay safe.

If the site has a Content-Security-Policy

Add our hosts (the install checker prints the exact ones for your project):

script-src  https://{ASSET_HOST}
connect-src https://{API_HOST}
img-src     https://{ASSET_HOST} data: blob:

Ad blockers

Our file names and host are neutral and the script sends no analytics, so most blockers leave it alone. If a client still sees "The review tools could not load", ask them to pause their ad blocker for this site, or send them the screenshot review link instead.

Check it

Paste the live URL into Check install in TweakTick. Normal visitors are not affected: the script only switches on for links that carry a review token.