Every campaign has a small set of access controls that decide who can reach the redemption page and place an order. They live in Campaign Settings → Sharing & Permissions and layer on top of each other — turn on as many as you need.
#Private Campaign (Invite Only)
When Private Campaign (Invite Only) is on, only people you invite by email can redeem. The campaign URL becomes invite-only, and visiting it without an invite link is blocked. This is the default for most account-driven sends — onboarding kits, customer gifting, anywhere your list is known.
When the toggle is off, the campaign URL is shareable. Anyone who has the link can reach the redemption page, subject to the controls below. See Campaign types for when public vs. private fits best.
#Restrict by Email Domain
When the campaign is public (Private is off), you can turn on Restrict by Email Domain to require that recipients sign in with an email at one of your Whitelisted Email Domains. Add domains as a tag list (for example, yourcompany.com, yourcompany.co.uk).
This is useful for closed audiences served by a public link — a single shared link for an all-hands gift, gated to your own staff; a partner program restricted to verified partner domains; a customer rewards send limited to a specific account's people.
#Password Protection
Also available on public campaigns: turn on Password Protection and set a password recipients must enter to view the redemption page. You share the password out-of-band — usually in the message where you share the link, or via a separate channel.
This is the lightest gate. It's good for time-boxed events, soft launches before a wider rollout, or any send where the link itself might leak but you want one extra step.
#Combining controls
Controls layer. Some common combinations:
- Private alone — the default tight setting; only invited emails can redeem.
- Public + Email Domain — one shared link, locked to your company's email domains.
- Public + Password — one shared link with a single password gate.
- Public + both — a shared link, gated by domain and password (strongest of the public configurations).
#What recipients see when they fail a control
If a recipient fails any of the gates above — wrong domain, wrong password, no invite link on a private campaign — the redemption page shows a generic "this campaign isn't available" style message rather than naming the specific gate. That's intentional: it avoids advertising what kind of access control is in place.
If a recipient is having trouble getting in legitimately, the fastest fix is to verify their email/domain or resend the password directly.