Claim flow

The first real submission to an unclaimed endpoint emails the recipient a one-click claim link. Clicking it creates (or binds to) an account. No password step at claim time.

The email

Triggered by the first non-spam submission to an unclaimed endpoint. Subject line references the endpoint’s form ID. Body includes the submission payload plus a single prominent Claim this endpoint button. No signup-form CTA, no upsell.

Token semantics

The claim link carries a single-use, short-lived token scoped to that endpoint. Clicking it consumes the token, creates an account keyed to the recipient email (if one doesn’t already exist), and binds the endpoint to that account. The token expires 7 days after emission — a second submission re-issues a fresh token.

Rebinding an existing account

If the recipient already has a gopigeon account, the claim link logs them in via a magic-link flow and attaches the endpoint to their account. Password-based login remains optional and can be set later from the dashboard.