A round of UI cleanup plus a proper Billing section inside Settings:

Billing — see your current plan and renewal date, open the Stripe customer portal to manage payment methods, and upgrade to a higher plan directly from Settings (monthly/yearly toggle, Apple-glass plan cards, "Recommended" badge on Professional).

Plan notifications — you now get an in-app notification when your plan changes, when a payment fails (with a link to the hosted invoice), or when a subscription is canceled.

Avatar persistence — uploaded avatars now actually stick. Previously the upload would succeed but the new image wouldn't show up anywhere until you hard-reloaded.

Softer typography — page headings are lighter, sidebar section labels read as subtle chapter markers instead of nav items.

Sign-out screen — the stray top-left "Signing out…" label is gone, replaced with a centered full-screen state.

Why it matters: Settings is now a real home for both your profile and your plan, and the rough edges around avatars, headings and sign-out are gone.

For whom: all users. Billing adapts to your current tier (free users see upgrade options; paid users see manage + upgrade paths).

Follow-up fixes after the Settings-v2 release:

• Every date-picker on the site (Partnerships, Challenges admin range, analytics period, etc.) renders cleanly again after a recent library upgrade had broken the styling.

• - The dashboard Performance-chart tooltip now formats revenue/deposits as currency and count metrics with thousands separators — easier to read at a glance.

• - Collapsed sidebar looks right: logo and avatar fit their 32-px tile, real initials instead of a stub fallback, no leftover tier badge overflowing.

• - Page headings sized down slightly for better hierarchy across pages.

• Why it matters: cleaner UI end-to-end plus fewer small papercuts after the big Settings shipment.

• For whom: all users.

Press ⌘+, (or click the gear icon) anywhere in the app to open the new Settings modal. Everything in one place, deep-linkable via URL.

What's inside:

• Notifications — seven categories with separate email, push and in-app toggles. Security alerts stay on by design.

• - Active sessions — see every device signed into your account, revoke any of them with one click.

• - Trusted devices — tick "Trust this device for 30 days" during the next 2FA challenge and BetLink won't ask for your TOTP code on that device for a month. Revoke from the same panel.

• - Auto-lock — after 60 minutes of inactivity we ask for your password again before letting you continue, then land you back exactly where you were.

• - Danger zone — log out of all devices + delete account.

• Legacy /user/settings/* URLs now deep-link straight into the modal, so old bookmarks keep working.

• Why it matters: faster access to every setting, better visibility into where your account is signed in, and less friction from 2FA on devices you actually trust.

• For whom: all users.

Dashboard widgets now read directly from BetLink's database instead of hitting the partner backoffices on every page load. Upstream syncs run automatically twice a day (plus a deeper full-refresh on the 1st of every month), or you can trigger a sync yourself via the new refresh pill in the top navbar — hover it to see how long ago the last sync happened and a countdown ring until the next allowed manual refresh. On the integration settings page there's also a Full re-sync button that pulls up to a year of data in one go (admin only, 24-hour cooldown).

Why it matters: dashboards load faster, no more partner-API timeouts, and you decide when to pull fresh numbers.

For whom: all users — manual refresh for anyone, full re-sync for admins.

The /alltime and /month slash commands in chat now pull real earnings from your leaderboard snapshots — FTDs, Net Gaming Revenue (NGR) and commission (NGR × your tier rate). Your tier badge shows up on each card. /week, /day and /hour keep their FTDs + RP layout for now.

Why it matters: you can share real performance numbers directly in any channel without leaving chat to look them up.

For whom: every paid user in any community chat channel.

Signup, login, password reset and magic-link flows now return identical messages whether the email is registered or not. Attackers can no longer enumerate which emails have BetLink accounts — that shuts the door on targeted phishing and credential stuffing.

Backup-code errors now show one of three specific messages instead of a generic "invalid": "already used", "invalid (typo?)" or "no backup codes on this account". Submitting the same code from two tabs in parallel is caught correctly — only one attempt succeeds, the other gets the correct "already used" message.

Bonus: brief outages of our rate-limiter backend no longer break the recovery form.

Why it matters: smaller attack surface at the auth layer and less confusion when you hit the MFA flow.

For whom: all users.

The Commission Breakdown widget on the dashboard now visualizes how your gross earnings turn into your net payout: Gross → Fees → Chargebacks → Adjustments → Net Payout, rendered as a waterfall chart with semantic colors (green for additions, red for subtractions, blue for totals). Hover each step to see sign and exact amount.

Why it matters: at a glance you see where deductions come from and what remains net — better than a lonely bottom line.

For whom: Affiliate role (on the dashboard).

Note: currently shown with preview data. Once the payouts API is live, real amounts will show — the chart layout stays identical.

In Settings → Security you can now enable TOTP 2FA. Scan the QR code with your authenticator app (Google Authenticator, Authy, 1Password, etc.), verify once, done. Setup generates ten backup codes — shown once, save them somewhere safe. If you lose your 2FA device you sign in with a backup code.

Also: if both your authenticator and backup codes are gone, you can file an account-recovery request. A security admin from the BetLink team approves it, with a 24-hour cool-off period during which you can cancel via email link if someone else triggered the request.

Why it matters: password-only protection isn't enough anymore. With 2FA you're protected even if your password leaks. And the recovery flow makes sure you're never permanently locked out.

For whom: all users (optional). Admins and security admins: required.

The dashboard gets four new capabilities: a Widget Manager (side drawer with a toggle per widget), new default layouts (4 widgets for admins, 6 for affiliates, 8 for agencies), a Reset button, and a Version Banner that notifies you when we improve the defaults — with "Apply" or "Not now" instead of silently overwriting your layout.

Also fixed: layout corruption when switching between screen sizes (your large-viewport layout is now protected), double scrollbars in widgets, and widgets resized too small now show a red ring with a "minimum size" hint.

Why it matters: your dashboard stays stable across browser resizes, you can curate it yourself, and our updates never override your customization without asking.

For whom: all users. Defaults differ by role (Admin / Affiliate / Agency).

When Feedback boards, Roadmap, Changelog or dashboard widgets (Top Performers, Performance, Commission Breakdown) are empty, they now show a topic-relevant icon, a clear explanation, and — where it makes sense — a direct call-to-action (e.g. "Invite sub-affiliates" on an empty Commission Breakdown).

Why it matters: you immediately know why nothing is showing and what to do next, instead of having to guess whether it's a bug or really empty.

For whom: all users, especially newcomers and anyone with a freshly created workspace.

The left sidebar is now organized into five collapsible groups — Overview, Revenue, Rewards & Progression, Community, Workspace. Your open/closed state per group is remembered by the browser.

In the footer, three clickable bars replace the old single tier badge: Tier (30-day FTDs), Milestone (lifetime) and Achievements.

Why it matters: faster access to what you need, and your progress is visible at a glance instead of hidden behind a click.

Bonus: the broken Feedback link in team workspaces was fixed. Internal Roadmap links replace the old external one.

For whom: all users across every workspace type (Solo, Team, Admin preview).

Paid users can now chat directly inside BetLink — four public channels (#general, #wins, #help, #strategy) with real-time delivery. Slash commands (/alltime, /month, /week, /day, /hour) post live top-earnings cards straight into the chat.

Also shipped: support DMs — open a direct line to the admin team, we reply from the admin inbox.

Why it matters: discuss strategies, wins and provider performance without a Discord detour. Admin support is faster because DMs land right next to your dashboard.

For whom: Paid users can send and read, plus open DMs. Free users can read along and open DMs. Admins moderate and answer DMs (bypassing the paid gate).

Beta 1.0 Released