Skip to main content

Your Account

Account → Profile. Your name and sign-in address, your password, every sign-in that can still be renewed, a copy of everything we hold about you, and the button that closes the account.

Changing the address you sign in with​

An email change takes two steps, and nothing moves until the second one.

Edit the address and a Current password field appears — required only for an address change, never for a rename. Saving parks the new address and sends a confirmation link to the new address. Until you open that link you keep signing in with the old one, and the panel says so:

Waiting for you to confirm new@example.com. You still sign in with old@example.com until then.

The link expires; Send the link again issues a fresh one, up to three times an hour.

This is two steps because of what a typo now costs. If a locked account can only be recovered through a link sent to its address, then an address changed to one you cannot read is an account you cannot get back. The confirmation reads the address off the link itself, so if you request a change to B, change your mind to C, and then open the B link, the B link is simply stale — it cannot move you somewhere you no longer asked for.

Confirming your address​

A banner appears across the dashboard until you do:

Confirm your email to invite teammates.

Being unconfirmed blocks exactly one thing: sending invitations. Not signing in, not collecting data, not anything else. Invitations spend our sending reputation on somebody else's inbox, on the word of someone who has not shown they can read their own — so that is the one action held back. Sign-in is deliberately not blocked, because a mail server having a bad day would otherwise lock out every new customer at once.

Sign-ins​

The panel is called Sign-ins, not Devices, and the difference is real: signing in again from the same browser creates a new entry. Three entries can be one laptop. Telling them apart would require fingerprinting the browser, which this product refuses to do to your visitors and will not do to you either.

Each row shows the browser and platform as far as they can be read, when the sign-in happened, when it was last used, and — if one was recorded — a rough area rather than a full IP address. Your current session is tagged This browser and has no sign-out button, because signing yourself out of the tab you are reading is not a feature.

  • Sign out on a row ends that one sign-in.
  • Sign out everywhere else ends all the others and leaves this one, so you can see that it worked.

Changing your password does the same thing automatically: every other browser is signed out, this one stays.

Your data​

Export my data downloads a JSON file with your profile, the organizations and sites you belong to and how they are configured, your subscription and invoices, the invitations you sent, and the record of actions you took.

Two exclusions are deliberate:

  • No credentials. Site API keys, Slack webhooks, Telegram tokens and the like come back as <redacted>. The setting name survives, so "is Slack configured" is still answerable — but an export is a file that gets emailed onward, and a site key in an export is a site key in somebody else's inbox.
  • No collected rows. Errors, leads and recordings are exported per site, as CSV, from their own screens — those streams are paged and can run to tens of thousands of rows, and a second path that loads them all into one JSON file would fail on exactly the sites that most need it.

This is your own account data. For the data you hold about a visitor — their export and their erasure — see GDPR and the Visitors screen.

Closing the account​

Close this account deletes it permanently. There is no undo and no grace period.

Before you type anything, the panel shows What goes with it: every organization that will be deleted and every site inside it, by name. The rule is one sentence —

An organization dies with the last of its owners.

— so an organization you share with another owner survives your departure, keeps its sites and its data, and is listed separately as kept, because someone else owns them too. You need to know that before you decide, which is why the preview names both lists rather than only the casualties.

Closing requires your password and then typing your email address to confirm. The password is required by the server, not just by the form: a stolen session must not be able to end an account.

If you are the only super admin, the button is replaced by:

You are the only super admin. Promote somebody else before closing this account.

An empty console is a state nobody can leave through the product, so it is refused before you start rather than after.