Affiliate Screen

The affiliate screen is the single place your referrers use ViralRef. It lives on your organization's branded web address at /ref/[code]. The same URL covers signup and returning visits -- the URL never changes after they verify.

Older /portal links still work. They redirect into this screen.

Accessing the Screen

Referrers open their personal link:

https://your-subdomain.viralref.com/ref/sarah-abc123

Or the code-less entry point for your default program:

https://your-subdomain.viralref.com/ref/portal

(/portal and /portal/[programId] redirect here too.)

How Login Works

Login is phone + text message code -- no passwords:

1. The referrer enters their phone number (and optionally a first name on first visit)
2. They receive a code via text message
3. They enter the code
4. The verified screen appears on the same URL -- there is no redirect

No email field. No app to install. The phone number is the account.

Two States on One URL

Unverified

Before OTP, visitors see your merchant branding, a reward-aware pitch, and a short form: phone plus optional first name.

Verified

After OTP, the screen shows:

• Reward hero -- welcome celebration with one-shot reward code (new signups), current gift-card / points / coupon status (returning visits), or a share-first hero when the program has no referred-side reward
• Share block -- native share when available, plus QR, SMS, WhatsApp, and email fallbacks
• Wallet badges -- Add to Apple Wallet / Google Wallet when configured
• How it works -- short explainer of the referral loop
• Status line -- one-line summary of their activity
• View full history -- opens a modal with fuller earnings and referral history (not a separate route)

Branding

The affiliate screen uses your organization's branding:

• Logo displayed in the header
• Organization name throughout
• Custom web address (e.g., acme.viralref.com)
• Portal accent / button colors from program branding settings

Configure branding from Settings > Organization > General and your program's portal branding fields.

Custom Domain

For a fully branded experience, use your own domain. Go to Settings > Organization > General and enter your custom domain (e.g., referrals.yourbusiness.com).

Portal Security

• Text message verification -- No passwords means no password-related attacks
• Phone number login -- Only the registered phone number can access the affiliate's data
• Long-lived affiliate sessions -- Wallet-pass taps months later do not force a re-OTP
• Data isolation -- Referrers can only see their own data
• Subscription-gated -- Unsubscribed orgs cannot send OTPs (responses stay enumeration-safe)

Next Steps