Chrome extension and bookmarklet

For agencies and their clients

Three ways to put the comment tools on a live site:

Way	Who sets it up	Works on	Good for
Script snippet	The agency, once per site	Sites where you can add code, and whose security settings allow it	The normal way. The client just presses Review on the live site
Bookmarklet	The client, in 10 seconds, no install	Most sites, including free staging sites (`webflow.io`, `framer.app`, …) where you cannot add code	Quick reviews when the snippet isn't on the site
Chrome extension	The client, once (Chrome only)	Every site, including sites that block scripts and bookmarklets	Sites with strict security settings, or clients who review often

If none of these work (a phone, a locked-down work laptop), the client uses Review the site on the review page. That shows screenshots and works everywhere.

Bookmarklet

What it is: a bookmark that starts the review on the page you're looking at.

Open your review page (the link from your email).
Press Review with bookmarklet.
Drag the TweakTick review button to your bookmarks bar. (Or press Copy and paste it as the address of a new bookmark.)
Open the site (Open the site button), then click the bookmark. The comment toolbar appears.

Good to know:

Each bookmarklet works once, within 10 minutes. After that it says "This bookmarklet has expired or was already used". Go back to your review page and get a fresh one. You can drag the new one over the old one.
Clicking it again in the same tab (after a reload, for example) carries on with the same review. No new bookmarklet is needed.
It only works on the site's registered address (the one the agency entered for the project).
"This site blocks bookmarklets — use the TweakTick extension": the site's security settings (Content-Security-Policy) stop our script. Use the extension below, or Review the site (screenshots).
Nothing happens at all when you click it: some browsers block bookmarklets completely on strict sites, before they can show a message. Same fix: the extension.
The review page offers the bookmarklet only when the snippet is not on the site, and only when the extension is not installed.

Chrome extension

What it is: a small Chrome add-on that shows the comment tools on any site, even ones that block scripts.

Install it (now: test version from the agency)

Until the extension is in the Chrome Web Store, it is installed "unpacked":

The agency sends you the extension folder (built from tweaktick/extension, see its README).
In Chrome, open chrome://extensions and turn on Developer mode (top right).
Press Load unpacked and pick the folder.
Reload your review page. A Review with extension button appears.

Install it (later: Chrome Web Store)

Open the TweakTick page in the Chrome Web Store and press Add to Chrome.
Reload your review page and press Review with extension.

Use it

Press Review with extension on your review page. The site opens in a new tab with the comment tools. If you reload the tab, click the TweakTick icon in the toolbar to bring them back.

Privacy notes

Bookmarklet: holds a one-time code that expires after 10 minutes, never your login. Bookmarks can sync to your other devices; a used or expired code there does nothing. It loads the same review script as the snippet, from TweakTick's script host.
Extension: runs only on the tab where you start a review (Chrome's activeTab). It asks for a site's permission only if you choose to bring the tools back without clicking. It does not read your other tabs or your browsing history.
Both send TweakTick only what the review needs: your name and email (asked once), your comments, a small picture of the part of the page you comment on, and which screen sizes you looked at. Approval records also keep your IP address and browser details, as on the review page.
Your review session is kept in the site's tab (session storage, cleared when you close the tab) or, for the extension, in the extension's memory (cleared when you close the browser).

For agencies

Which to recommend: install the snippet when you can (no client setup). Send clients the bookmarklet for free staging sites. Recommend the extension for sites with a strict Content-Security-Policy (the install checker reports csp_script_blocked or csp_connect_blocked).
The project's site address must be registered (allowed origins). Screenshot-only projects offer neither the bookmarklet nor the extension.
Technical details: CONTRACTS §2 (Bookmarklet and Chrome extension), tweaktick/extension/README.md.

New to TweakTick? Start free. Clients never sign up.

Free tools for this

Free, in your browser. All free tools

Way

Who sets it up

Works on

Good for

Script snippet

The agency, once per site

Sites where you can add code, and whose security settings allow it

The normal way. The client just presses Review on the live site

Bookmarklet

The client, in 10 seconds, no install

Most sites, including free staging sites (webflow.io, framer.app, …) where you cannot add code

Quick reviews when the snippet isn't on the site

Chrome extension

The client, once (Chrome only)

Every site, including sites that block scripts and bookmarklets

Sites with strict security settings, or clients who review often

Bookmarklet

What it is: a bookmark that starts the review on the page you're looking at.

Open your review page (the link from your email).

Press Review with bookmarklet.

Drag the TweakTick review button to your bookmarks bar. (Or press Copy and paste it as the address of a new bookmark.)

Open the site (Open the site button), then click the bookmark. The comment toolbar appears.

Good to know:

Each bookmarklet works once, within 10 minutes. After that it says "This bookmarklet has expired or was already used". Go back to your review page and get a fresh one. You can drag the new one over the old one.

Clicking it again in the same tab (after a reload, for example) carries on with the same review. No new bookmarklet is needed.

It only works on the site's registered address (the one the agency entered for the project).

"This site blocks bookmarklets — use the TweakTick extension": the site's security settings (Content-Security-Policy) stop our script. Use the extension below, or Review the site (screenshots).

Nothing happens at all when you click it: some browsers block bookmarklets completely on strict sites, before they can show a message. Same fix: the extension.

The review page offers the bookmarklet only when the snippet is not on the site, and only when the extension is not installed.

Chrome extension

What it is: a small Chrome add-on that shows the comment tools on any site, even ones that block scripts.

Install it (now: test version from the agency)

Until the extension is in the Chrome Web Store, it is installed "unpacked":

The agency sends you the extension folder (built from tweaktick/extension, see its README).

In Chrome, open chrome://extensions and turn on Developer mode (top right).

Press Load unpacked and pick the folder.

Reload your review page. A Review with extension button appears.

Install it (later: Chrome Web Store)

Open the TweakTick page in the Chrome Web Store and press Add to Chrome.

Reload your review page and press Review with extension.

Use it

Press Review with extension on your review page. The site opens in a new tab with the comment tools. If you reload the tab, click the TweakTick icon in the toolbar to bring them back.

Privacy notes

Bookmarklet: holds a one-time code that expires after 10 minutes, never your login. Bookmarks can sync to your other devices; a used or expired code there does nothing. It loads the same review script as the snippet, from TweakTick's script host.

Extension: runs only on the tab where you start a review (Chrome's activeTab). It asks for a site's permission only if you choose to bring the tools back without clicking. It does not read your other tabs or your browsing history.

Both send TweakTick only what the review needs: your name and email (asked once), your comments, a small picture of the part of the page you comment on, and which screen sizes you looked at. Approval records also keep your IP address and browser details, as on the review page.

Your review session is kept in the site's tab (session storage, cleared when you close the tab) or, for the extension, in the extension's memory (cleared when you close the browser).

For agencies

Which to recommend: install the snippet when you can (no client setup). Send clients the bookmarklet for free staging sites. Recommend the extension for sites with a strict Content-Security-Policy (the install checker reports csp_script_blocked or csp_connect_blocked).

The project's site address must be registered (allowed origins). Screenshot-only projects offer neither the bookmarklet nor the extension.

Technical details: CONTRACTS §2 (Bookmarklet and Chrome extension), tweaktick/extension/README.md.