The settings screen

Admin → Settings holds everything you would otherwise have to edit in a config file. Values are stored in storage/app/settings.json, outside the code, so an update never overwrites them.

Two values — the Paddle API key and the webhook secret — are encrypted at rest with your application key and shown as dots once saved. Leaving either field blank on save keeps the stored value rather than clearing it, so you can change one setting without re-pasting your secrets.

Site#

Setting	Default	What it does
Site name	empty	Shown in the panel header and used in outgoing email.
Support email	empty	The address customers are pointed at from the panel.
Logo	none	PNG, JPG, WebP, or GIF up to 2 MB.
Favicon	none	PNG, WebP, or ICO up to 512 KB.

Paddle#

Setting	Default	What it does
API key	empty	Server-side Paddle key. Encrypted at rest.
Client token	empty	Public token used by the checkout overlay in the browser.
Webhook secret	empty	Signing secret for incoming webhooks. Encrypted at rest.
Sandbox	on	Whether the checkout overlay opens against Paddle’s sandbox.
Webhook tolerance	300 seconds	How stale a signature timestamp may be before the request is rejected.

Referrals#

Setting	Default	What it does
Commission rate	20%	Share of the order total credited to the referrer.
Cookie lifetime	30 days	How long a referral click stays attributed.
Minimum payout	50	Balance a referrer must reach before you owe a payout.
Auto-approve after	30 days	Days before a pending earning is approved automatically. Set to 0 to approve everything by hand.

Downloads#

Setting	Default	What it does
Download throttle	10	Downloads allowed per customer per minute.
Log retention	90 days	How long download records are kept before pruning.

License keys#

Setting	Default	What it does
Key prefix	MP	Up to 10 characters prepended to every generated key.
Key length	32	Total key length, between 8 and 64.

Changing the prefix or length affects only keys generated afterwards. Existing keys keep working exactly as they are.