People

Four groups, four kinds of sign-in. You keep a list of email addresses for each one and send invitations; each invitation creates an account and mails its login to that address.

The email list and the accounts are never linked. The invitation generates a random username and password, mails them, and keeps no record of which login went to which address. That is deliberate: it is the same promise the crew screen makes, applied to sign-ins. It has consequences worth knowing before you rely on it, and they are spelled out under each group.

Everything on this page is an access gate. Adding, inviting, disabling or deleting an account changes who can sign in. It never touches a single entry, and nothing anyone sends is ever attached to their account.