Skip to main content

Accounts

Sign in​

Sign in offers Google, an email link, and Facebook when that option is available. There is no password stored on Dealpuffin. Firebase Authentication checks the provider, and Dealpuffin keeps your user id and verified email.

One account per verified email. A second provider with the same verified address is the same user. Facebook is merged only when the email is verified.

Stripe is not a sign-in method. Connecting Stripe is a step after login, on the product.

Session​

The session cookie is dp_session. It is httpOnly and lasts about an hour. Sign out clears it. In production the cookie is set for .dealpuffin.com, so the MCP host can see it during OAuth.

Settings​

Settings has two tabs.

  • Account. The email on the account, and which sign-in methods apply.
  • API keys. Create and remove agent keys, and remove an OAuth agent.

The Stripe connection is on the Stripe page, not in Settings.

Delete​

To delete an account, a listing, or a waitlist email, write to [email protected]. Removing an API key is self-serve.

Last updated on