How it works · Shopify

One OAuth click and you're live.

No theme code. No webhook wiring. No Pixel hacks. Click Install, approve the scopes, our app handles the rest.

Step by step.

1
1. Click Install in the Shopify App Store
Or paste your shop URL into the install URL we email you on signup. Shopify takes you through the standard OAuth consent screen.
2
2. Approve scopes
read_orders, read_products, read_customers, write_discounts (auto-coupons), write_script_tags (t.js injection), read+write_themes (theme app extension for affiliate portal embed).
3
3. Token vaulted, webhooks registered
We exchange the OAuth code for an access token, store it in Supabase Vault keyed to your merchant_id, and register orders/paid, orders/cancelled, refunds/create, app/uninstalled webhooks automatically. You don't touch the Webhooks tab.
4
4. Connect a payout rail
Same as WooCommerce — Mercury, PayPal Mass Payments, Stripe Connect, or Wise. Each method has a per-merchant Vault entry.
5
5. Recruit your first affiliate
Drop /a/[your-slug]/signup into your footer or send to your existing affiliate list. Approve in the queue. The first attributed sale shows up in Overview within minutes.

What just happened

Yes t.js loads via Theme App Extension or ScriptTag (both supported)
Yes First-party _cobz_ref cookie captures the affiliate slug
Yes _cobz_sess session id mirrors into cart note_attributes
Yes orders/paid webhook reads note_attributes back, joins to click
Yes Discount-code attribution: any affiliate-tagged code attributes to the affiliate at checkout
Yes refunds/create webhook triggers refund clawback decision tree
Yes app/uninstalled webhook tombstones the merchant gracefully

Up to 25 affiliates with no credit card.