The Features section (Account settings > Storefront) lets you turn customer-facing flows on or off, and choose how email confirmation and marketing consent work. These settings shape what every customer sees during sign-up, checkout, and ongoing account interactions, so changes here apply to your entire customer base.

Customer accounts

When enabled, customers are invited to create an account and the customer portal is exposed. Disable it if you don't want any customer-facing accounts (e.g. one-shot purchases with no portal access). With it off, every portal page only says that receipts come by email, and sign-in, sign-up and password resets are refused. Buy, checkout, download, redeem and activation links in your emails still work.

Email confirmation

Choose whether new customers get a confirmation email, and whether they must confirm before they can sign in.

• Require email confirmation (the default for new accounts): customers confirm before signing in, and trying to sign in re-sends the link.

• Skip email confirmation: no confirmation step.

Accounts that used the older behaviour also see Send confirmation (optional): customers get the email but can sign in without confirming. If you switch from it to Require email confirmation, existing customers who haven't confirmed are asked to confirm the next time they sign in; they don't lose access.

Phone numbers

When enabled, checkouts collect a phone number alongside the email address. Useful if you need to contact customers for support or fulfilment. Disabled by default since most products don't need it.

Captcha

When on, customers pass a quick bot check to sign up, and once per order when they check out something that costs nothing (a free product, or an order a coupon makes free). It is a small "Verify you are human" box that usually passes on its own. Paid checkouts never show it. It is off by default.

Leave it off if your app signs customers up through the licensing SDK, which can't show the check. If your website sets a Content-Security-Policy, allow your <account-id>.moonbase.sh address in frame-src.

Marketing consent

How customers consent (or not) to receiving marketing communications during sign-up and checkout. Pick the model that matches the law where your customers live:

• Opt-in: the consent checkbox is unchecked by default; customers must actively check it. Required for GDPR (EU/UK) and the safest default everywhere.

• Opt-in (checked by default): the box is pre-checked. Customers can uncheck it before submitting. Not GDPR-compliant: only use if you sell exclusively outside the EU/UK.

• Opt-out: there is no consent box; customers are subscribed automatically and must unsubscribe later. Not GDPR-compliant: only use if you sell exclusively outside the EU/UK.

Frequently Asked Questions