01
What this service does
When an authorized user enters their approved work address, the service creates a six-digit code and sends it to that same address. Codes expire quickly, can be used only once, and bind the resulting session to the approved identity.
02
What it does not do
The Gmail integration cannot read messages, inspect contacts, access files, or deliver to an address outside the private allowlist. This public information site contains no login form and collects no form submissions.
03
Why Google access is used
The dedicated sender authorizes the narrow gmail.send permission so the private mailer can deliver authentication codes. Google authorization is completed only by the dedicated sender account.