Your account
Everything on this page is about the person, not the organization. Reach it from the account menu in the top bar, or at app.<DOMAIN>/account.
Signing in
There are three ways in, and they are alternatives rather than steps.
| Method | Notes |
|---|---|
| Email and password | The default. Followed by a code if two-factor is on. |
| GitHub | Continue with GitHub. Links to an existing account by verified email address, or creates one. |
| Passkey | Sign in with a passkey. Completes the sign-in on its own. |
Why a passkey skips the two-factor code
A passkey is already two factors — the device that holds it, plus the fingerprint, face or PIN you proved on that device. So it signs you in on its own, even on an account with two-factor turned on.
That only holds because Notifyzr requires that second step and rejects a passkey that was used without one. A security key with no PIN cannot be tapped past your authenticator app.
If your browser already holds a passkey for this site, it may offer it as you click into the email field, without your pressing the passkey button at all.
If the sign-in screen shows no Register link, the instance is not accepting new accounts. If it says the instance is invite-only, the signup form still works — but only through an invite link a site admin sends you.
Forgotten passwords
Forgot your password? mails a reset link. The confirmation is deliberately vague ("if an account exists for that address…") so the form cannot be used to find out which addresses are registered. Setting a new password signs out all other sessions.
Profile
Your profile image sits at the top of the page, above the tabs — upload and crop it there. It is shown across the dashboard and to the other members of your organizations. The Profile tab holds everything else.
- Your name — optional. It is shown wherever the dashboard would otherwise name you by email address: the top bar, the initial in your avatar, member tables, the activity log. It is display-only — the email address remains your identity, and wherever your name appears the address keeps a line of its own. Leave it empty to be shown as your address.
- Language — applies to this account, on every device.
- Default organization — see below.
- Organization invitations — see below.
- Appearance — light, dark or system. Saved in this browser only; it is not synced across your devices.
- Preferences — time zone, number format and currency (below).
Regional preferences
Three settings decide how the dashboard renders data:
| Setting | What it drives |
|---|---|
| Time zone | Every timestamp shown, and every wall-clock you type — the send scheduler and a custom API-key expiry are read in this zone, with a hint naming it. |
| Number format | Grouping and decimal marks — and also date order and month names. It is the only regional signal stored, so it drives all of them together. |
| Currency | Reserved. Nothing in the product carries a monetary amount yet; the card previews it. |
The number format is separate from the display language on purpose: the language picks which copy renders, the number format picks how values are shaped.
Default organization
The organization sign-in drops you into. Set it from the star in the organization switcher, or — for an organization you are not a member of, which is the only place that can — from the Default organization card here.
If it is unset, or you have lost access to it, sign-in falls through to the first organization you can reach. It never strands you: a deleted organization, a removed membership and a stale id are each handled separately.
If you belong to no organization at all, sign-in lands on a first-run screen whose only two ways forward are creating an organization and accepting an invitation to someone else's.
Security
The Security tab.
Email address
Changing it asks for your current password and signs out your other sessions. A notice goes to the old address, so a change you did not make is visible at the address that still belongs to you.
Password
Change password if you have one; Set a password if your account signs in with GitHub only. Either way, other sessions are signed out.
Two-factor authentication
Enable it to require a six-digit code from an authenticator app at sign-in. Enrolling shows a QR code and then a set of recovery codes — shown once, each usable once, for when you lose the authenticator.
Turning it off asks for your password, and you are emailed that it happened.
Passkeys
Passkeys sits beside two-factor. Enrolling asks for no password — creating the credential already requires user verification on the device, and an SSO-only account has no password to give.
One passkey, both sites
A passkey enrolled here also signs you in to the site-admin panel at admin.<DOMAIN>. The credential is scoped to the bare domain rather than to app., which is what makes that work.
Deleting your account deletes your passkeys with it, so a surviving credential can never sign an erased account back in.
Connected accounts
The Connected tab manages the GitHub link: connect, or disconnect. If GitHub is currently your only way in, the card says so and asks you to set a password first.
Organization invitations
Invitations addressed to your email address appear on the Profile tab and in the notification bell — including ones sent before your account existed, since they are keyed by address. Accept joins the organization; Decline withdraws you.
Deleting your account
The Danger tab. Deleting is a scheduled action, not an immediate one.
- You request it. A date is set a fixed number of days out — 30 by default — and you are emailed that date.
- Nothing about your account changes in the meantime. You stay signed in, keep your memberships, and the dashboard works exactly as before. The card just shows the date and a Keep my account button.
- On that day, it is erased.
The delay exists for takeover, not regret: erasure is irreversible, so anyone holding a stolen session could otherwise destroy the account outright with nothing you could be told in time. The email is the point of the delay.
Requesting deletion deliberately does not sign you out — that would take away the one screen that can call it off. Requesting again re-schedules from that day, so you always get the full window.
Owning an organization blocks deletion, checked when you ask and again before the erasure runs. Transfer ownership or delete the organization first. A blocked account stays scheduled and is reconsidered on the next run rather than being silently cancelled.
What erasure actually removes
Your email address, name, password, authenticator secret and default organization are wiped. Every way back in goes with them: your GitHub link, any outstanding password-reset link, your recovery codes and your passkeys. Your profile image and your organization memberships are deleted. All your sessions end immediately.
What is left is an empty account with an id and two dates — no name, no address, nothing to sign in with. It is kept because the activity log, broadcasts and invitations record who did something, and deleting it outright would turn every action you ever took into an anonymous one.
There is no undo, and no admin screen that can look at an erased account.
A site admin can erase immediately
The scheduled window is what self-service deletion does. A site admin removing an account from the admin panel erases it on the spot.