Account and security

Your Account is the signed-in User settings page at Account. It is not a public profile and not the org Members roster. You can open it with zero orgs.

Sign in

Law1 has no password and does not collect a phone number.

  • Log in — Continue with Google, or a 6-digit code / magic link to an email that already has a User. The public login form does not create Users.
  • Start free — Google, or inbound mail to [email protected] from the address you want to use.

Emails match as lowercase and trimmed. Plus-tags and dots are different Users ([email protected] is not [email protected]).

Signing in replaces any existing session on that browser (the previous User is signed out).

Account settings

One scrolling page (no tabs):

  • Profile — display name (editable); avatar is read-only (Google photo or initials). No upload.
  • Email — sign-in address, read-only. It cannot be changed. Wrong mailbox: create a new User on the address you want, then delete the old User if last-owner rules allow.
  • Google — Connected or Not connected. No unlink control. Continue with Google still links when the verified Google email matches.
  • Sessions — this device and others; revoke other sessions. Log out stays in the avatar menu.
  • Privacy — the same analytics-cookies toggle as Cookies
  • Your data — request an access summary by mailing [email protected] from the address you sign in with. That is not a file dump.
  • Delete account — danger zone, last

Sessions

Revoke a stolen or leftover session from Account. Revoking others does not require a fresh OTP (so you can kill devices without fetching mail first).

If you hit the concurrent-session limit, the oldest session is dropped so the new login still works. That browser next sees a signed-out login.

Delete your account

Self-serve on Account, with an OTP confirm and typing your email.

Last remaining Owner of any org cannot delete. Use Make owner on that org’s Members page, or email [email protected] to tear the org down. User delete does not delete the org.

If you are not blocked: you leave every membership (org work stays), sessions end, and you land on login. That mailbox is immediately reusable as a new User. Leftover org rows show Deleted user. Incoming invites to that address are not cancelled.

Org delete itself is not in the product — Orgs and seats.

Security reports

Vulnerability reports: Vulnerability disclosure, not the contact form’s Access/errors category.