Install the ZapClaw chat widget on your website

In short: the widget is one script tag. You paste it once on your site, a chat bubble appears, and your ZapClaw agent answers visitors from the knowledge you gave it. The chat runs in a frame on ZapClaw's own domain, chat.zapclaw.app, so it never reads your page.

The snippet

<script async src="https://chat.zapclaw.app/loader.js" data-widget-id="YOUR_WIDGET_ID"></script>

Copy the exact snippet of your widget from the Agents area of the dashboard. The id above is a placeholder: yours is different.

The async keeps the loader from delaying your page, and the loader creates the chat frame only when a visitor first opens the bubble.

Pick your platform

• WordPress, for a site you host yourself.
• WordPress.com, on the plans that allow plugins.
• Google Tag Manager, with a Custom HTML tag.

Any other site builder that lets you add a script to every page works the same way: paste the snippet where the platform accepts custom code, usually the footer or just before the closing body tag. Some free plans do not allow custom code at all, and then the widget cannot be installed there.

Allowed websites. In the dashboard, add your site's address to the widget's allowed websites, exactly as visitors see it. https://www.example.com and https://example.com are two different addresses. A site that is not on the list shows no bubble.

If your site has a Content Security Policy

Most sites need nothing here. A site with a strict Content Security Policy adds two entries to its policy, and nothing else:

script-src https://chat.zapclaw.app
frame-src https://chat.zapclaw.app

• script-src lets the page load the small loader file.
• frame-src lets the page show the chat frame.
• Only if your policy also restricts connect-src (or has no connect-src but restricts default-src), add connect-src https://chat.zapclaw.app too. The loader reads the look of your bubble from there before drawing it.
• No style-src entry is needed: the loader sets its styles through the browser's style API, never an inline style tag.

Add the address to the directive you already have. If you have no script-src or frame-src, the browser falls back to default-src, so add it there.

Anonymous mode

The widget on these guides runs anonymous: it does not know who the visitor is. It still answers from the knowledge bases you marked public, collects a contact when it needs one and hands the case to a person when it should.

Recognizing a signed-in visitor needs a signed identity token made by your own server. A site without a server or a developer, such as a site on a page builder or on WordPress.com, stays anonymous, and an anonymous visitor never reaches the bases you kept private.

What the widget does on your site

• No cookies, no tracking. It sets no cookie and loads no analytics, pixel or third party in your page.
• Nothing written on your domain. The only thing it keeps is a random session id, inside the chat frame, on chat.zapclaw.app. Browsers keep that storage apart for each site.
• It does not read your page. The chat runs in a frame on another domain, so it cannot see your forms or your text.
• The visitor is told it is an AI. The chat opens with a notice that the answers come from an AI, and it says how to reach a person.

A sentence for your privacy policy

The widget handles what your visitors type, on your behalf, so your privacy policy should say so. You can adapt this sentence:

The chat assistant on this website is provided by ZapClaw, which processes the messages visitors type into it on our behalf, as our processor. The chat sets no cookies on this website, and conversations are kept for 90 days.

It is a starting point, not legal advice: adapt it to your own policy and to the laws that apply to you. How ZapClaw handles data is in the Privacy Policy.

Check that it works

1. Open your site in a private window, so no cache or extension gets in the way.
2. Look for the bubble in the corner you chose. Open it and send a question your agent can answer.
3. No bubble? Check, in this order: the agent is published, the widget is active, your address is in the allowed websites, the snippet is on the page (view the page source and search for chat.zapclaw.app), and no content blocker or Content Security Policy is stopping it.

Other install guides

• WordPress, for a site you host yourself.
• WordPress.com, on the plans that allow plugins.
• Google Tag Manager, with a Custom HTML tag.