Super Memberships

Create (or reuse) a Notion database with one row per member. Super only needs two properties from it.

Anything else in the table (name, notes, purchase date, Stripe id, …) is ignored by Super and is yours to use freely.

Example/template:

Tiers

Tier names are simply the options of your Multi-select property. Create as many as you need — basic, advanced, founding-member, 2026-cohort, and so on. Super reads that option list from Notion and offers those names when you protect a page.

Super tracks tiers by their Notion option id, not by their text:

• Tiers should never be empty
• Renaming a tier in Notion is safe. Press Reload tiers in Super and the new name shows up everywhere, with your page settings intact.
• Deleting a tier option in Notion orphans it. Pages still pointing at it show a warning and drop it the next time you save that page.

Advanced options

Allow an entire domain

To give everyone at a specific company access to a tier, add a row using this format:

• @yourcompany.com

For example, *@example.com gives any email address from example.com the tiers assigned to that row.

If a member has both a regular email row and a matching wildcard row, their tiers are combined.

Duplicate email addresses

If the same email appears in multiple rows, Super combines all the tiers assigned to those rows. This means the member gets access to every tier listed across their rows.

⚠️ Make sure every member has a tier

A member with an email address but no tier can still log in, but they won't have access to any members-only pages.

If a member sees "You don't have access to this page," check that their row has at least one tier assigned.

Next

Once the table exists, share it with a Notion integration — see the Notion DB connection page — and then connect it in Super.

Once you have your Membership Access List in Notion, you need to connect it to Super. This allows Super to check your member list when someone tries to access protected content.

VIDEO

The connection requires a Notion connection and its Access Token.

Steps

1. Create a new Notion connection.

Go to Notion Connections and create a new connection.

Tip: Give the connection a name that identifies the website or path it will be used for, such as example.com/memberspace.


2. Copy your Access Token.

Save the Access Token somewhere secure. You'll need it in the next step.


3. Grant the connection access to your Membership Access List database.

In Notion, open the Membership Access List database and grant access to the connection you just created.


4. Click Add to Page

Next is Connect your Membership to Super

Connect your database

1. Enter your Notion integration token and click Load databases.


2. Select your Membership Access List from the database dropdown.
3. Map your properties:
• Email: Email, Text, or Title
• Tier: Multi-select


Click Connect when you're done.

If you change the integration token, you'll need to repeat the database and property selection because Super will reload the databases available to the new token.

After connecting

The Membership section in Settings will show:

• Your connected database
• The Email and Tier properties
• Available tier names
• Last synced time
• Reload tiers and Disconnect buttons
• Sign-in link sent by and Login webhook
• Login log with the View login log button
• Expose member data with the Configure button (Pro, see Step 8)

Your Notion token is stored securely and is never displayed again after you enter it.

Reload tiers

Click Reload tiers whenever you add, rename, or remove tier options in Notion. It also clears every cached member check, so each signed-in member is checked against Notion again on their next page view. Use it after you remove a member or change their tier and need the change to apply right away instead of within 24 hours.

This refreshes the available tier names. Member rows are not copied into Super — member access is checked against Notion when they log in. With Expose member data on, the signed-in member's own row is kept for up to 24 hours, and Reload tiers refreshes it too.

Disconnect

Click Disconnect to stop using Membership on your site. Gated pages will no longer be accessible to members.

• Your page-to-tier assignments are preserved, so you can reconnect the same database later without setting up your protected pages again.
• Existing member sessions are invalidated when you disconnect or reconnect.

Tip: To force all members to be checked against Notion again immediately, use Reload tiers. There is no need to disconnect and reconnect.

Next

Protect pages by tier — connecting your database alone doesn't make any pages private. You must mark individual pages as members-only and assign the appropriate tiers.

Go to your site → Pages → (the page) → Protection. In the Protect Page card:

1. Choose Membership in the protection dropdown.

2. In Allowed tier(s), pick one or more tiers.
3. Save.

Site changes take a few minutes to reach the published site, as with every other Super setting.

How tier access works

Access is OR-based. A member can access a page if they have at least one of the tiers selected for that page.

For example, selecting basic and advanced allows members with either tier to access the page.

No tier selected = public page. If you don't select a tier, the page remains accessible to everyone.

Sub-pages inherit protection

When you protect a page, its sub-pages are protected automatically.

For example, protecting /members also protects:

• /members/library
• /members/library/2026

Inherited pages are marked with a shield icon and show which parent page they inherit protection from.

Also protect sub-pages: under the tiers in the Protect Page card there is a checkbox, checked by default. Uncheck it when the tiers should protect only that page: its sub-pages - also pages opened by their Notion ID - are public, and a sub-page with its own tiers stays members-only. The same checkbox works for a page password.

Show page title and description to visitors without access: unchecked by default. While it is off, visitors who are not signed in, search engines and link previews get neither the page title nor its description (not even an SEO description you typed in) - only the login screen. Check it to show both in front of the login screen. You set it on the page that has the tiers and it applies to every sub-page that inherits them; an inherited sub-page has no checkbox of its own. RSS feeds leave out members-only pages unless the option is on. The page address and its cover image are not hidden. Signed-in members still see the page title in the browser tab.

Override access on a sub-page

A sub-page under a password-protected parent inherits the parent's password by default if the setting below is enabled. If you want to use a different password or make the sub-page publicly accessible, you can change its settings directly on the sub-page.

• Inherit from parent – Use the same password as the parent page.
• Password protect – Set a different password for the sub-page.
• No password (overrides parent) – Allow visitors to access the sub-page without entering a password, even if the parent page is password-protected.

These settings let you control password protection for individual sub-pages without changing the password settings of the parent page.

Switching or removing protection

A page can use either Membership or Password protection, but not both.

• Switching from Password protection to Membership (or the other way around) removes the previous protection after confirmation.
• Click Remove to remove Membership protection from a page.
• If a selected tier is deleted from Notion, Super will warn you that the tier no longer exists. Save the page to remove the outdated tier, then select the current tiers.

What you may see instead of the tier picker

When a visitor opens a members-only page, they’ll be asked to enter their email address:

Enter your email to receive a login link.

After submitting, everyone sees the same confirmation message, whether or not the email belongs to a member:

Check your email for a login link.

This prevents visitors from using the login form to find out whether an email address is registered as a member.

The login email

The login link is sent from no-reply@links.super.site. The sender name, subject, and email text are sent in the language of the page the member signs in on. This uses your site's language or an added language if the page is under that language's home page.

The default subject in English is "Your login link to {domain}".

You can customize the sender name, subject, and email text for each language under Settings → Membership → Login email (see Step 6). If you leave a field empty, Super uses the built-in default text for that field.

• Valid for: 1 hour
• Uses: One
• Body: A short message with a login button

If the email goes to spam, move it to your Inbox to help prevent future messages from being filtered.

Then, click Confirm Sign In!

After signing in

Clicking the login link signs the member in and returns them to the page they originally requested.

Their session:

• Lasts 30 days
• Uses a secure browser-only cookie
• Removes the login token from the URL immediately

Signed-in members can use the Log out button shown on gated pages.

Signed in but no access

A member can be signed in but still unable to access a page if their account doesn't have any of the required tiers or not added in your members database.

They'll see:

You don't have access to this page

Your membership doesn't include the tier required to view this content.

They can log out and try a different email address.

If this happens unexpectedly, check the member's Email and Tier values in your Notion database.

Expired or used links

If a login link has expired or was already used, the member will see:

This login link has expired or was already used.

They can simply enter their email again to request a new link.

A link may also be marked as used if a corporate email security scanner opened it before the member did.

When membership is re-checked

• New logins: Super checks the member's access against Notion.
• Existing sessions: Super re-checks membership at most once every 24 hours.
• Membership changes: Updates to a member's tiers can take about 5 minutes to take effect.
• Removing a member: An existing session may remain active for up to 24 hours.

Need to revoke access immediately? Click Reload tiers in Settings → Membership. This invalidates existing member sessions and forces a fresh check against Notion.

You can find these options in Settings → Membership under Login email, Sign-in link sent by and Login webhook.

Login email

The email with the login link uses built-in texts in the language of the page the member signs in on - every language you can set for your site has them. To use your own wording, click Edit email in the Login email row.

• Language: on a site with more languages, pick the language first. Each language has its own texts.
• Fields: Sender name, Subject, Heading, Text, Button and Note under the button. An empty field keeps the built-in text of that language, shown as its placeholder.
• {domain} in any field becomes your site's address, for example "Sign in to {domain}".
• The Heading follows the subject unless you write your own.
• The sender address stays no-reply@links.super.site; only the sender name changes.
• The next login email uses your texts right after you save. No publishing is needed.

The Login email row is hidden when Sign-in link sent by is set to Webhook, because Super then sends no email.

Login webhook

You can optionally send the login link to your own webhook instead of, or in addition to, Super's email. This works with services such as Make, Zapier, n8n, or your own endpoint.

The webhook receives:

{
  "email": "member@example.com",
  "magicLinkUrl": "https://yoursite.com/members?membership_token=…",
  "expiresAt": "2026-08-15T12:00:00.000Z"
}

Before saving:

• Click Test first. Super won't save an untested URL.
• Test requests include "test": true and a dummy link.
• Changing the URL requires you to test it again.
• Leave the field empty to disable the webhook.
• Webhook requests have a 60-second timeout.

Webhook failures aren't shown to visitors. They will still see the normal neutral confirmation screen. If login links aren't being delivered, check the Login log.

⚠️ Security: magicLinkUrl is a live login credential valid for one hour. Only send it to a trusted HTTPS endpoint.

Sign-in link sent by

Set Sign-in link sent by to Webhook (instead of Super) if your webhook handles the entire delivery process.

When set to Webhook:

• Super won't send an email.
• The member sees "Your login link is on its way."
• The setting takes effect immediately.

After changing it, publish the site (or make another site change) for the updated message to appear on the public login screen.

Automate adding members

Super doesn't include a built-in checkout. For paid memberships, you can connect your payment system to Notion using an automation service:

Stripe (payment) → Make / Zapier / n8n → new row in your Notion members table → Super lets them in

When a payment is completed, the automation adds the member to your Notion database.

Important:

• Trigger your automation from one payment event to avoid creating duplicate member rows.
• Each new row must include an email and at least one tier.
• Secure your automation webhook, for example by verifying the Stripe signature or using a shared secret.
• For cancellations, remove the member's row or clear their tier.
• Existing sessions may remain active for up to 24 hours after access is removed. Click Reload tiers to end them right away.

See Stripe → Memberships (Make, n8n, Zapier) for an example setup.

The View login log button in Settings → Membership → Login log shows the site's last 100 login events, newest first. You can search by email, and times are shown in your local timezone.

Event types

The log is useful for troubleshooting login issues:

• Login requested but no Login succeeded → the link may not have been delivered or opened.
• Not a member → the email isn't in your Notion database. Check for typos or whether the member used a different email address.

The dashboard shows the latest 100 events. Super keeps a longer internal record, so contact support if you need older history.

Manually generate a login link

If a member doesn't receive their email, you can generate a new login link from a Login requested event.

Click the copy icon to:

1. Go to Settings → Membership → Login log → View login log

2. Generate a new login link for the requested page.
3. Copy it to your clipboard.
4. Send no email.
5. Record a Link generated event in the log.

You can then send the link through another channel, such as Slack, WhatsApp, or Intercom.

Important

• Each generated link is valid for 1 hour and one use.
• A fresh link is generated every time you click the copy icon.
• Links aren't stored in your site data or Super's login logs.
• A link won't be generated if the email is no longer a member.
• Chat-app link previews don't consume the login link, but some corporate email security scanners may.

⚠️ Treat login links like passwords. Anyone who receives and opens a link can sign in as that member. Only share it directly with the intended member.

Settings → Membership → Expose member data → Configure lets your custom code read the signed-in member's own row of the members table as window.superMember - on members-only pages, or on the whole site. You tick the columns it may read; your tier column is always there as tiers.

Columns you mark Encrypt go into a short-lived token (signed JWT or encrypted AES, 15 minutes to 24 hours) that your Make, n8n or Zapier automation checks with your site key. Your automation then knows which member is calling it, and you never put a secret into custom code.

window.superMemberReady.then(function (member) {
  if (member) console.log(member.name, member.tiers, member.token);
});

Full guide, with the checks for n8n, Make and Zapier: 🔐Member data in your custom code (and a token Make, n8n or Zapier can trust).

Limits worth knowing up front

Quick reference

Where to click