Embeddable feedback widget (drop-in script for any site)

2026-05-17T18:58:41.540327+00:00

Give us a ` ` snippet that opens a Hollahoop feedback panel inline on the customer's own site. Should not require iframes for the launcher. - Capture user identity via a JWT we sign - Theme it via CSS vars - Submit to the same `posts` API as the public site

Shipped· 2 months ago

Give us a <script src="https://hollahoop.lamoi.fi/widget.js" data-project="my-project"> snippet that opens a Hollahoop feedback panel inline on the customer's own site. Should not require iframes for the launcher.

Capture user identity via a JWT we sign
Theme it via CSS vars
Submit to the same posts API as the public site

Comments (2)

Elsama· 2 months ago
Big fan. Designing the API surface this week — the launcher will be a tiny vanilla JS bundle (<5KB), and the panel will be a real iframe pinned to the launcher. I'll share the spec on this thread.
Elsama· 2 months ago
Widget MVP is built and live.

Shipping now:
- Drop-in <script src="https://hollahoop.app/widget.js" data-project=...> floating launcher (configurable position, label, accent). The launcher is plain injected DOM (not an iframe); clicking it opens a panel whose iframe targets /embed/<slug>.
- /embed/<slug> submit form posts through the same posts API as the public board, with anonymous/optional/required auth handled.
- Snippet generator + live preview in Settings > Widget, plus a real /<slug>/embed-test page so admins can click the launcher and run an end-to-end submission before pasting the snippet.
- Hardened widget.js to locate its own <script> tag by src, so it works reliably even when injected dynamically or loaded async.
Split into its own card (kept separate because it is security sensitive and larger than the MVP): identified end users via a JWT we sign - a token signing endpoint, verification, and associating the signed identity with submissions instead of an anonymous Supabase user.

Join the discussion