Every customer receipt includes a "View this visit" link that opens the customer portal. The link is a signed magic-link — no password, no account creation. This page walks through what's inside, how it's secured, and what to do if a link is shared or reused.
Anatomy of the link
The URL looks like https://poolstamp.com/portal?t=<token>. The <token> contains the customer id and an expiry timestamp, signed with a server-side secret. Nothing about the customer's identity is guessable — you cannot construct a valid token by trying variants.
What the link grants
- Read-only access to that customer's portal view.
- Completed visit details, including chemicals, photos, notes, and repair items.
- Upcoming visit information when PoolStamp has it.
- Payment access only through the Stripe payment link already included on the receipt.
- Not access to other customers or to the operator's account.
Expiry
Receipt portal links expire after 7 days by default. After that the link returns an expired-link message and the customer needs a fresh link from the operator.
What happens if a link is shared
- The link works for whoever clicks it. This is a design choice — customers forward receipts to spouses, HOA boards, and property managers all the time.
- It only exposes that customer's portal view. There is no lateral movement to other customers or the operator's account.
Revoking a link
If a link needs to be killed early, ask support to rotate or revoke the affected access path. Operators can generate a fresh link from the customer record when a customer needs access again.
Under the hood
Portal tokens are validated against the current signing secret. When single-use mode is enabled, PoolStamp also records a nonce so the first valid click redeems the link into a short portal session.