Subscribers

New subscriptions start as pending. The system sends a confirmation email; only an explicit action by the recipient confirms the subscription. Random tokens are stored as hashes, expire after 24 hours, and work only once.

Signed unsubscribe links require no login. Opening a link with GET shows a page without canceling the subscription. Confirmation and cancellation require a later action so email scanners cannot change subscription status.

The dashboard provides search, filters, pagination, administrative unsubscribe, and CSV export per project. The delivery queue rechecks subscriber status immediately before sending.