Cap it
Daily and per-user caps stop a campaign from issuing more codes than it was budgeted for.
Turn post-checkout into a second visit.
Scratch cards and wheels after purchase. RetentionPlay signs every webhook — your promo engine verifies the HMAC before it issues a code.
- scratch_v1 / wheel_v1 The server decides the outcome and the client only renders it, so a prize cannot be forced from the browser.
- Shopify & Tilda Copy-paste snippet or theme block — no app review cycle to wait on.
- Rate limits Per-user caps and cooldowns on rewards and play events, enforced server-side.
Where the reward budget stays safe
Sign it
Every reward callback carries an HMAC signature and an idempotency key, so a replayed request grants nothing twice.
Verify it
Your promo engine stays the last word on whether a code is actually issued.
Start your retention loop
See pricing
Give the thank-you page a reason to be revisited.
Tell us which promo engine you run and we come back with a concrete embed plan.