settings
Hardware-backed sign-in keys. Each device you register gets its own credential. You can sign in from any registered device; removing one doesn’t affect the others.
Permanently delete your account. All switches, recipients, payloads, sessions, and passkeys are destroyed. A pseudonymous account_deleted entry is appended to the public log so the deletion itself is auditable. This cannot be undone.
This destroys every armed and pending switch (cancels timers, purges payloads from R2), removes all your passkeys, magic-link tokens, and sessions, then deletes your user record. The public log will gain one signed account_deleted entry under a hashed user ID.
Type DELETE to confirm.