settings
Hardware-backed sign-in keys. Each device you register gets its own credential. You can sign in from any registered device; removing one doesn’t affect the others.
People you can target with a switch. Invite once, reuse forever — no need to re-enroll a recipient for each new switch. They tap a passkey on their phone or laptop; no file to save.
We email them a one-time enrollment link (valid 14 days). When they tap it on their device, their phone or laptop sets up a passkey, and they're enrolled.
Permanently delete your account. All switches, recipients, payloads, sessions, and passkeys are destroyed. A pseudonymous account_deleted entry is appended to the public log so the deletion itself is auditable. This cannot be undone.
This destroys every armed and pending switch (cancels timers, purges payloads from R2), removes all your passkeys, magic-link tokens, and sessions, then deletes your user record. The public log will gain one signed account_deleted entry under a hashed user ID.
Type DELETE to confirm.