Your account
Passwordless: a sign-in link by e-mail, a session on this device. An account is what closes the upper edge of a stamp's bracket — the timestamp that says the latest your bytes can have existed. Checking a stamp is free, anonymous and needs no account; the desk, the tools and the farmer's page never needed one and still do not.
Google and Netlify Identity on this page. They are not the e-mail-link session that holds the plan and the keys until this deployment has set its account keys.
A cart is waiting on this device
A plan or a block is in the cart. Pay from checkout, or edit it first.
Sign in
We send one link to the address below. It works once, for 15 minutes, and signs in the device that opens it. No password exists to reset.
or
or
An account is what closes the upper edge of a stamp's bracket: a free stamp binds a new envelope to a public beacon, and a paid timestamp adds evidence that the committed bytes existed by its stated time. Neither dates the original capture. Checking is free and anonymous forever, with or without one.
Plan and balance
—
You are on a plan already, so moving up or down — and moving between monthly and yearly — happens on Stripe's pages, where the change is prorated against what you have paid.
Prices exclude VAT; Stripe adds it at checkout. Cards, Revolut Pay, invoices, receipts, VAT identifiers and cancellation are all on Stripe's own pages: this site never sees a card number or Revolut credentials. A top-up is a one-off purchase of closed stamps that never expire.
This deployment cannot take payment yet, so nothing here can be bought. The account still works and the stamps it makes still seal: they go out one-sided, binding the new envelope to a beacon round, without a signed upper timestamp or proof of original capture time.
What else the plan carries seats, mailbox, backup
| What | On this plan |
|---|
API keys
A key stamps from a mill line, a build server or a script that has no browser session. It spends this account's balance, so treat it as you would a card: anyone holding a key can spend this balance. Only the SHA-256 of a key is stored here, which is why a key can be shown once and never again — a lost one is revoked and replaced, not recovered.
Copy this key now. It will never be shown again, and anyone holding it can spend this balance.
Workspace backup
The desk keeps its records in the browser it runs in. A backup here is the same bundle the desk exports (Records → Export everything): your product, assessment, mitigation, statement and sealed records, up to 2 MB. It is stored as you sent it and read by nobody; restore it into any browser through the desk's Import bundle.
Hand-off requests
The requests your desk opened for suppliers, read from the desk on this browser when it holds one, otherwise from the backup. The mailbox itself lives on this origin for 14 days per request; the desk collects the replies. A farmer answering one never sees a balance or a price: the request carries your account, so your balance closes the farmer's bracket.
Signing out clears the session on this device only. A subscription is cancelled on Stripe's own pages through Billing, invoices and cards. Closing the account (and deleting its backup) is by e-mail to pilot@openstamps.com until the button exists.