Account, sign-in, and security
The account system covers four things: verified registration, password management, sign-in device control, and data export you can perform yourself.
Registration and verification
Registration uses an email verification code. The server checks both expiry and single use, so expired or reused codes are rejected. This also confirms ownership of the address and limits bulk registration.
Passwords are stored as salted hashes; the platform does not keep plaintext. An account without a password cannot sign in with email and password and must use a third-party entry point.
Passwords and devices
Change the password under Settings → Password after verifying the current one. When the change succeeds, sessions on other devices are revoked and must sign in again.
Sign-in devices lists the account’s active sessions with a device label and last activity. A suspicious session can be revoked on its own, or every session except the current one can be ended at once.
Data export and deletion
Download a copy of your account data under Settings → My data. The export contains account details, works, pixels, point history, and reputation records. It is generated on the server and excludes other people’s data.
After deletion, email, password, sessions, favourites, notifications, and point records are removed or anonymised and cannot be restored. To keep the map and other people’s works intact, published worlds and blocks are not deleted; the author is shown as a deleted user. If those works should be removed too, delete them before deleting the account.
Deletion is irreversible. Export your data first and confirm that no unlock or event settlement is still in progress.
Frequently asked questions
- I forgot my password. What now?
- Sign in on the login page with an email verification code, then set a new password in Settings. Each code can be used once within its validity period.
- Does check-in break when I change devices?
- No. The check-in streak and daily exploration progress are calculated on the server per calendar day and do not depend on the device.