Account

synthetic-readback-auth

This origin hosts sign-in and device approval for your account.

Hosted sign-in

This origin holds the session server-side, in a __Host- cookie for this origin only, and never writes the session token into a page.

Device sign-in

Single-use and expiry-bounded, matching the code shown on your device. The terminal collects its own token.

Script and storage

None. This origin runs no script, calls no third party, and keeps no browser storage.