01. Account messages
A connected service may send requested sign-in or verification codes, security notices, receipts and essential account updates. The current presentation flow stops at code entry and does not send email.
02. Marketing is optional
Marketing requires a separate lawful basis and, where required, opt-in. Required terms acceptance is not marketing permission. Provide an unsubscribe link in marketing messages and honor withdrawal without blocking essential service communications.
03. Code security
Never share an email code with another person. Codes must be short-lived, single-use and rate-limited by the production backend. A correct code verifies control of the email address only; it does not prove identity, ownership or payment.