Payment widget and checkout panel

Embed a buy button or a product card on your site: the snippet, the attributes it reads, direct checkout and what your terms must contain, and the direct payment link.

The widget is two lines the partner copies from the cabinet and you paste into your page: a placeholder element and a script tag. The script asks Norelio what to draw, draws a button or a card, and sends the buyer to Norelio's payment pages. No payment form, no card field and no payment-provider button is ever drawn inside your page: the whole payment happens on Norelio's domain, and nothing about the buyer passes through your site.

The snippet

html

<div data-lis-widget="wgt_1a2b3c"></div>
<script src="https://app.norelio.eu/widget.js" async></script>

The widget id (wgt_1a2b3c above) is created by the partner in the cabinet catalog, under the product, as "Site code"; one product can have several widgets, each with its own look and its own list of allowed sites. The script is served from https://app.norelio.eu/widget.js. The product name, price, image and the widget's look are read from the cabinet at display time, so the snippet never has to be pasted again when any of them changes; the answer may be cached for up to a minute.

Two display modes

Button: One button with the caption and the current price. A click opens Norelio's payment page for the product in a new tab.
Card: A small card with the product image, name, price and a button. A click opens a panel over your page with the product description, the price and the checkout: the buyer confirms the terms and pays from the panel, in a new tab on Norelio's payment domain. The panel is Norelio's own page in an iframe; your page never receives its markup.

With the return URL enabled and the page open on one of the partner's allowed sites, payment opens in the SAME tab instead, and the buyer comes back to your page afterwards. With direct checkout (below) neither mode opens the panel or the payment page: the buyer goes straight to the payment provider.

Attributes the script reads

The script reads nothing from your page beyond its own element. All attributes go on that one element:

Attribute	Required	Meaning
`data-lis-widget`	yes	The widget id from the cabinet. The script finds its placeholders by this attribute.
`data-client-reference`	no	Your reference for the buyer's account, returned in every webhook for the order. Read at the moment of the click. See Client reference.
`data-return-url`	no	Where to bring the buyer back after payment; without it, the current page without its query string and fragment. Used only when the return is enabled for this site. See Return URL.
`data-package`, `data-amount`	no	Top-up products only: the package number or the amount in minor units chosen for the buyer in advance. See Top-ups.

Direct checkout

By default the widget shows the Norelio panel before payment: the purchase terms and a consent checkbox (the plain button opens the Norelio payment page with the same checkbox). With direct checkout the button and the card send the buyer straight to the payment provider's page instead, in the same tab, with no panel and no checkbox on our side. The buyer's consent to the purchase terms is then collected by you, on your own site, and Norelio records that it was collected there.

Direct checkout is switched on by the platform: after reviewing your terms, an admin allows it for your account. Then the partner chooses "Straight to the payment page" under "Start of payment" in the widget settings; "Norelio panel" stays the default, and every widget created before direct checkout existed keeps the panel. Until the permission is granted the option is shown disabled; ask support from the cabinet's Messages section. If the permission is withdrawn, every widget of the partner goes back to the panel at once.

Direct checkout works only on the sites in the widget's own list of allowed sites. A widget with an empty list keeps the panel, and so does the same snippet on any other site. Norelio checks the site the browser reports for the request (its Origin) against that list and refuses a request from anywhere else without creating an order. Do not set a no-referrer referrer policy on pages with the button: with it the browser does not report the site, and the request is refused.

On a click the script submits a form to Norelio in the same tab: the widget id, the client reference and the return address, exactly as from the panel. The product, the price and the mode are taken from the widget on our side, never from the form. Norelio creates the order and sends the buyer to the payment provider. On the Stripe page, under the pay button, the buyer sees "By paying you agree to the purchase terms" with a link to the terms page. PayPal shows no such text: there the consent is entirely yours, and our result page links to the terms. After payment the buyer lands on our result page and, with the return enabled, comes back to your site as described in the return URL section. If the purchase cannot start (the product is unavailable, too many attempts), the buyer lands on our payment page with a short explanation.

What your terms must contain

Before the buyer presses the button, your site must show your terms and obtain the buyer's agreement to them. Your terms must contain the substance of the Norelio purchase terms:

the item is digital content or a service performed by the seller;
delivery begins after payment: immediately for digital content such as a code, a file or a link, or when the seller starts carrying out a manual service;
by completing the purchase the buyer agrees to delivery starting on that basis and acknowledges that the statutory right of withdrawal ends once delivery has begun;
as a goodwill policy, the buyer may request a full refund within 3 days of purchase by contacting the seller; after that, refund requests are no longer accepted.

The full text of the Norelio purchase terms, version 2026-08-3, published on the payment domain at https://pay.lis-system.eu/pay/terms:

Purchase terms. This purchase is digital content or a service performed by the seller. Delivery of this item begins after payment — immediately, for digital content such as a code, a file or a link, or when the seller starts carrying out the service, for a manual service. By completing the purchase you agree to delivery of this item starting on that basis and acknowledge that your statutory right of withdrawal for this item ends once its delivery has begun. As a goodwill policy, you may request a full refund within 3 days of purchase by contacting the seller at the address shown on this page. After 3 days refund requests are no longer accepted.

For a subscription product the agreement to recurring charges is also yours to collect: state the price, the billing period and that the subscription renews until it is cancelled. Stripe shows the billing period on its own page.

For every such order Norelio stores who collected the consent (you, on your site), the version and the text of the purchase terms, the buyer's IP address and browser from the request, and the date and the author of the platform's permission. This record is what a payment dispute is answered with.

Direct payment link

Instead of the widget you can link to the payment page directly: https://pay.lis-system.eu/pay/prod_1a2b3c. The partner copies the link from the cabinet catalog. Two optional query parameters are read: client_reference (the client reference) and return_url (the return URL).

Allowed sites and availability

A widget may carry a list of sites it is allowed on, kept by the partner in the cabinet. An empty list means any site. On a site not on the list the visitor sees "The payment button is not enabled on this site." instead of the button.
A button is drawn only while the product can be bought: it is active, approved, has a price and the partner's payment intake is switched on. Otherwise the visitor sees "This product is currently unavailable for purchase.".
The script fetches the widget data without cookies, uses no innerHTML, and never receives, stores or sends card details, provider credentials or Norelio keys.