What's New

Customer signup & authentication - Email-based signup with magic link verification, optional password login, password reset flow, and account management (display name, zip code, referral source).

Digital passport - Punch card showing checked-in vendors with progress toward Bronze (5 stamps), Silver (15), and Gold (30) prize tiers. Toggle "I made a purchase" flag on each check-in.

QR code & manual check-in - Scan vendor QR codes or enter a 4-character vendor code manually. GPS validation flags check-ins more than 500 meters from the vendor location.

Vendor directory - Browse all vendors with category filtering, full profiles with photos, descriptions, social links, special deals, and contact info.

Interactive map - OpenStreetMap-powered Leaflet map with vendor markers, category filtering, and GeoJSON data endpoint.

Plan Your Crawl - Save and star favorite vendors to build a personalized wishlist for event day.

Leaderboard - Top 25 participants ranked by check-in count.

Sponsors page - Sponsors displayed by tier (Title, Platinum, Gold, Silver, Community) with logos and website links.

Become a Vendor form - Public inquiry form for businesses interested in joining the crawl, with admin review workflow.

Event info & countdown - Event details page with date, time, and schedule information.

Milestone emails - Automatic email notifications when customers reach Bronze, Silver, and Gold tiers.

Admin dashboard - Overview statistics, quick event mode toggle (pre-event, event day, post-event, directory), and pending inquiry counter.

Vendor management - Full CRUD with logo/photo uploads, geocoding, category assignment, social links, vendor codes, and printable QR card generation.

Sponsor management - CRUD for sponsors with tier assignment, logo uploads, and display ordering.

Prize management - Create prizes tied to tier thresholds, random winner drawing from eligible customers, and redemption tracking.

Customer management - Search, sort, and filter customers with CSV export and individual detail views.

Event settings - Configure event name, dates, times, mode, announcement banner, and check-in toggle.

Vendor inquiry review - Admin workflow to review, annotate, and manage incoming vendor applications.

Analytics dashboard - Page views, sessions, link clicks, vendor saves, and filter events with date range filtering.

Audit log - Complete trail of admin actions with before/after values and action filtering.

Admin user management - Create, edit, deactivate, and reactivate admin accounts with lockout after 10 failed attempts.

Email system - Magic links, welcome emails, milestone notifications, vendor inquiry digests (daily at 7 AM), post-event recaps, and vendor performance reports.

Preflight checklist - Setup verification page for pre-event readiness.

Security - CSRF protection, bcrypt password hashing, secure session cookies, security headers (HSTS, CSP, X-Frame-Options), HTML sanitization, rate limiting, and session fixation prevention.

Infrastructure - Flask with PostgreSQL and Redis, Gunicorn with 4 workers, background scheduler for daily digests and token cleanup, deployed behind Traefik with HTTPS.

What's New - This page to track changes across versions.