// SIGN IN · the one without a password
one email. one link.
We send a single-use link to your inbox. It lives for fifteen minutes. It's bound to the network you asked from. Click it · you're in. No password to forget. No recovery puzzle. No "continue with provider X" theatre that quietly logs into your work account.
// 01 · request
you type your email · we mint a signed token · we audit-row the request
// 02 · deliver
a paper-warm email lands · mono type · "SIGN IN →" button
// 03 · verify
link burns on use · 15-min TTL · /24 IP-bind · rotated on consume
// 04 · audit
every request gets an audit row · trace-id round-trip · PII redacted
┌─ ENTER · the magic-link ──────────────────┐
└────────────────────────────────────────────┘
by signing in you agree to the corridor we built. no fine print. no dark pattern. no upsell.
by signing in you agree to the corridor we built. no fine print. no dark pattern. no upsell.
// SHORTCUT
press E to focus email · ENTER to send · we never auto-fill anywhere else.// QUIET · what we will never do at sign-in
Four lines we will never cross.
- ▸We will never use a sign-in to enrich a third-party data broker. The audit row is the only trace.
- ▸We will never let a sign-in OAuth into your Google work account. Magic-link is the floor.
- ▸We will never reuse a token. Click consumes; the next request mints a new one · every time.
- ▸We will never email a one-time code that survives the click. The link is single-use, period.