How does the Widerruf Button work?

How Widerruf Button works:

The app embeds a legally compliant withdrawal button into your storefront. When customers click the button, they are guided through a simple 2-step withdrawal flow:

1. Enter order details (order number + email required)
2. Confirm and submit the withdrawal request

After submission:

• A confirmation email is automatically sent
• A PDF copy is generated for the customer
• The request is saved in your admin logs (UTC time)

Where can I place the Widerruf Button?

The app supports:

• Theme App Block – Embed the withdrawal button anywhere in your storefront (footer, legal page, contact page, etc.)
• Customer Account Order Block – Add the withdrawal option directly inside customer order pages

You can control visibility and positioning via your theme customizer.

Does the button require customers to log in?

No.

The withdrawal process works without login, including for guest orders, ensuring compliance with upcoming EU requirements.

What happens after a customer submits a withdrawal?

Immediately after submission:

• A confirmation email is sent to the customer
• A PDF document of the withdrawal request is generated
• The request is stored in the admin dashboard
• A timestamp is recorded in UTC time

This ensures proper documentation and traceability.

How does the app prevent abuse or spam?

The app includes built-in verification and rate limiting mechanisms.

IP-Based Rate Limiting

If an IP address submits: 10 failed requests within 1 hour

→ The IP will be blocked progressively for: 15 minutes, 1 hour, 24 hours

Order-Based Rate Limiting

If there are: 3 failed requests for the same order within 1 hour

→ The system applies progressive blocking: 15 minutes, 1 hour, 24 hours

This protects your store from automated abuse and malicious attempts.

How does the app verify a withdrawal request?

Before accepting a request, the system checks:

1. Does the order ID exist?
2. Is the order within the 14-day withdrawal period?
3. Does the provided email match the store’s order records?
4. Has the IP or order exceeded rate limits?

Only valid requests are accepted and processed.

What happens if verification fails?

• The failed attempt is logged
• Rate-limiting rules may apply if multiple failed attempts occur

Is the app compliant with the upcoming 2026 EU requirement?

The app is built to support merchants in complying with the upcoming EU digital withdrawal requirement by providing:

• An always-accessible withdrawal option
• No login barrier
• Confirmation on a durable medium (email & PDF)
• Complete documentation and traceability

We recommend reviewing your full legal setup with a qualified legal advisor to ensure complete compliance for your specific business model.

Updated on: 19/02/2026