Accounts and sign-in 0.9.0
- Plans meter developer tokens once payments are live: Free reads only, 1,000 calls a UTC day; Pro and Team 20,000 and may act; Max 100,000 (403 plan-read-only, 429 plan-daily-limit with Retry-After until midnight UTC; refusals are not counted). Before payments are live nothing changes; the plan catalog (and the website's copy) states developer_calls and developer_writes.
- Sign in with Alelyon: apps registered in the developer console, or that register themselves (RFC 7591), sign people in with OAuth 2.1 (PKCE always) and OpenID Connect; a person sees and allows what each asks for, and the app's access token calls Pages with what they allowed, labeled with its name. Refresh tokens are used once; reusing one stops the sign-in. Disconnecting an app stops it at once.
- An app no one at Alelyon reviewed works for at most 100 people; Pages' moderators review, suspend and restore apps.
- Account deletion deletes the apps an account allowed and the apps it registered, with everything others allowed them.
- Records the Terms of 2026-10-21 and the Privacy Notice of 2026-10-21.2 (apps) with each sign-up.