Embedding on a private website

To the domain name of the website that the page is served from.

Additionally it has to be served over SSL.

If you use the JS embed it’ll automagically determine the Parent for you