Settings

Settings is your account control center. It's organized as a stack of cards, with the subscription-loss preview in the deletion dialog adapting to whatever plan you're on.

Security#

The Security card holds three things: your password, two-factor authentication, and the list of devices currently signed in.

Password#

Changing your password signs you out of every device. That's intentional and treated as a security event.

If you signed up with Google or another OAuth provider, the row reads Set a Password instead. Adding a PineHook password is what unlocks two-factor authentication for OAuth accounts. Your OAuth login continues to work alongside the new password.

Two-Factor Authentication#

2FA adds a 6-digit code from your authenticator app (Google Authenticator, Authy, 1Password, etc.) on top of your password.

Backup codes are shown exactly once during setup and are one-time use. You can regenerate the full set at any time, which immediately invalidates the old codes. Both disabling 2FA and regenerating backup codes require your password plus a current authenticator code, which is why OAuth-only accounts have to set a PineHook password before they can enable 2FA.

Active Sessions#

Active Sessions lists every device currently signed in, with browser, operating system, approximate location, and last-active time. You can revoke any single session, or sign out of every device except your current one in a single click.

Data & Privacy#

Download My Data#

You can export your full account data on demand, with no support ticket required, in JSON or CSV (ZIP) format. The export is split into eight categories you can mix and match:

Exports are rate-limited to once per hour. Re-opening the dialog with the same selection within the hour lets you re-download from cache without using a new slot.

Minimize Data Collection#

PineHook already collects very little. The records we keep are limited to what's needed to operate the service and meet security and compliance requirements: authentication events, billing, licenses, EA commands, signals, settings changes, and security events. This is the baseline that applies to every account, in line with the data-minimization principles in PIPEDA, Quebec Law 25, and the GDPR-equivalent regimes PineHook operates under.

Turning on Minimize Data Collection tightens that slightly further by dropping a handful of secondary records (support-inbox interactions, preference toggles, in-app navigation). It's a small delta, not a dramatic one. The trade-off is fewer breadcrumbs if you later open a support ticket, since some of the dropped records help reconstruct what happened. Switching back is a single click.

Email Preferences#

Two toggles control optional outbound email:

• Marketing Emails: product updates and trading tips. Off by default; opt in if you want them.
• Referral Emails: monthly summaries of your referral earnings. On by default; turn off if you don't want the monthly digest.

Transactional emails (password resets, payment receipts, security alerts) are governed separately and aren't affected by either toggle.

Tax Information (Canadian referrers)#

If you've referred at least one person and you're a Canadian resident, two extra cards appear in Settings to handle T4A tax reporting:

• Tax Information: your legal name, SIN (or business number for incorporated referrers), and mailing address. Required before PineHook can issue a T4A. Your SIN or business number is encrypted at rest (AES-256-GCM); your legal name and mailing address are stored to produce the T4A and used only for tax reporting.
• Tax Documents: annual T4A slips become downloadable from this card once the calendar year closes and your annual earnings meet the CRA's $500 CAD threshold.

If you haven't referred anyone, or you're outside Canada, these cards don't appear.

Danger Zone#

The Delete Account button opens a confirmation dialog with a "You will lose" preview listing exactly what you're forfeiting: plan tier with its paid-through date and license count. You confirm by entering your password and typing the word DELETE in capital letters.

Deletion anonymizes your personal data, cancels your subscription, and deactivates every license on your account in a single non-reversible step.

Next Steps#

• Subscription. View or change your plan, or cancel without deleting your account.
• Licenses. Manage your license keys and secret keys.
• Referrals. Earn referral commissions.