v4.17.0 — Certified Mail

Every account-critical email now leaves the pit lane on a torque wrench. 📬 📮 Mail that never gets dropped • Verification codes, reset links and deletion codes ride a durable outbox now — if the mail provider stalls mid-send, the tick picks the job back up and re-runs it until it lands, instead of silently eating your code • Nothing sensitive sits at rest: codes and reset tokens are re-minted at send time, never parked in a queue 🔐 Codes under lock • The 6-digit codes are now sealed with a server-side pepper, so a database peek alone can't crack them 🛡 Scanner-proof unsubscribe • An email security scanner clicking your unsubscribe link can't flip your settings anymore — it takes a real tap on a confirm page 🔗 Reset links that stay off the logs • Your reset link now hides its token in the part of the URL browsers never send to a server — off the request logs, off the referrer trail 🔎 Proof before the podium • A top-tier rarity now has to be backed by a trusted page we actually opened that names your exact toy number — unverifiable claims go to review instead of over-grading 🚪 One front door • Signing up with an address that already has a garage now gets the same "check your email" answer as a fresh signup — the mailbox is told, a stranger probing addresses learns nothing