# Your Moontors account

Moontors works without an account: everything on your computer, and the phone app on the same
network or through your tailnet. A Moontors account is Moontors' own, apart from your agents'
sign-ins under **Providers** (see [Signing in](/docs/sign-in/#providers)): signing in to Moontors
with Google never signs Gemini CLI in, and no agent's sign-in ever reaches Moontors' server. The
server holds your account, its sign-in methods and its plan, and what your plan's notifications and
relay need while it gives them, never your sessions, your code or anything a session holds; the
[Privacy Policy](/policies/privacy/#your-moontors-account) lists all of it.

## Opening it

Your account has two of **Profile**'s tabs: **Account**, the account's own page, and
**Subscription**, Pro's (see [Pro](#pro)). **Profile**, the person icon at the right end of the
header, shows them in the board's place, as **Settings** shows the settings, open on your agents'
sign-ins, **Providers** (see [Signing in](/docs/sign-in/#providers)); choose **Account** or
**Subscription** there. **Moontors Account…**, in the Moontors menu on macOS and in File on Windows
and Linux, opens **Profile** on its **Account** tab. The icon stays lit while it shows; the icon
again, or Escape, goes back to the board. Once you're signed in, your plan shows beside the Moontors
name at the left end of the header. Each time either tab shows, Moontors asks the server for your
account again.

## Signing in

Signed out, the **Account** tab says what the account is, with a link to the **Privacy Policy**.
**Sign in or create an account** opens Moontors' sign-in page in your browser, where you sign in
with your email and its password, or with Google, Apple or GitHub. If your browser is already signed
in, the page asks whether to go on as that account or to use another. Once you're done, the browser
sends you back to Moontors, which shows your account. While it waits, the page says so, with:

- **Open again**, which opens the sign-in page again;
- the copy button, which copies the page's address, to open in another browser;
- **Cancel**, which gives up signing in.

**Create an account** asks for your email, and Moontors' server mails it an 8-digit code, which
works for 10 minutes. Enter it with a password of at least 8 characters, and **Continue** makes your
account. The code proves the email is yours, so no account is made with an email until its code is
entered. A wrong code is refused; after three wrong tries the code stops working, and
**Send a new code** mails another, which replaces it. Each new code waits a little after the one
before, longer each time, and an email is mailed at most three codes in 10 minutes and ten a day;
one asked sooner is refused, and the code you have works still. If the email already has an account,
its code signs you in to it: an account made with Google, Apple or GitHub takes the password as its
own, and one that has a password keeps it. **Forgot your password?** on the sign-in page mails a
link to set a new one, which works for an hour and is mailed as often as a code is; setting it ends
every sign-in the account had, on this computer and any other. From one internet connection, at most
six codes and links are mailed a day, whatever their emails; past that, and when Moontors has sent
all the mail it can for the day, either page says so: try again later, or sign in with Google, Apple
or GitHub.

Your account signs in any of its ways, each as often as you like: its email and password, and
Google, Apple or GitHub, none of them replacing another. A sign-in with Google, Apple or GitHub
joins the account that has its email when the provider has verified it too; Apple's private relay
addresses never match, so link Apple from the page instead (see [Your account](#your-account)).
Moontors keeps your sign-in in your system's keychain, apart from the agents' sign-ins.

## Your account

Signed in, the **Account** tab shows your account's email, with **Sign out** beside it, then:

- **Sign-in methods**: each way your account signs in, marked **Linked**, and **Link** beside
  Google, Apple or GitHub while it isn't. **Link** opens a page in your browser naming your account,
  whose button opens that provider's sign-in, and once you're back it signs in to this same account;
  nothing is linked until that button is pressed. While it waits, the page says so, with
  **Open again**, the copy button and **Cancel**, as signing in does. A method with an email other
  than your account's, as Apple's private relay gives, joins it only this way, from Moontors signed
  in to it. **Email and password** shows once your account has a password.
- **Phones paired with this computer**: the phones **Phones** lists, each with **Remove**, which
  unpairs it, and **Pair a phone…**, which opens **Phones** (see
  [Your phones on the computer](/docs/phone/#your-phones-on-the-computer)). With your phones reached
  from anywhere, it's **Phones on your account** instead (see
  [Reaching your computer from anywhere](#reaching-your-computer-from-anywhere)).
- **Settings sync**: **Sync settings between your computers**, this computer's switch, with what
  syncs (see [Settings sync](#settings-sync)).

Your plan and its invoices are on the **Subscription** tab (see [Pro](#pro)). When Moontors can't
reach the server, the tab shows your account as it last read it and says so, with **Try again**.

## Pro

Pro adds your phones' notifications from this computer (see
[Notifications](/docs/sessions-and-board/#notifications)) and your phones reaching it from anywhere
(see [Reaching your computer from anywhere](#reaching-your-computer-from-anywhere)). Everything else
in Moontors is the same with Pro or without it. Pro is bought here, never in the phone app.

**Subscription**, **Profile**'s third tab, shows Pro whether you're signed in or not:

- Signed out, **Plan** says what Pro adds, with its price by the month and by the year (see
  [Pricing](/#pricing)), each **Upgrade** greyed, and a note to sign in to your Moontors account
  first: Pro is your account's plan. Its **Sign in** goes to the **Account** tab, to sign in there
  (see [Signing in](#signing-in)). Until Moontors sells Pro, **Coming soon** shows beside each
  price.
- Signed in on Free, **Plan** shows your plan and Pro's two prices, each with **Upgrade**; tax is
  added at checkout where it applies. A plan newer than your version of Moontors shows as
  **Another plan** until you update it. Until Moontors sells Pro, **Upgrade** is greyed, with
  **Coming soon** beside it.
  **Upgrade** opens Paddle's checkout in your browser, and the page waits for it as signing in does,
  with **Open again**, the copy button and **Cancel**. Paddle sells Pro as Moontors' reseller and
  takes the payment, so Moontors never sees your card. Once you've paid, your browser sends you
  back, and the page waits a few seconds for your payment to reach Moontors, then shows Pro; if your
  browser doesn't send you back, the page shows Pro the next time it reads your account. If your
  account already has Pro, as bought on another computer, the page says so and shows it.
- On Pro, **Plan** says whether you're billed monthly or yearly, and when your plan renews, or
  when it ends if you've cancelled it. If a payment doesn't go through, it says so, with **Update
  payment method**: Pro stays while Paddle tries the payment again, and ends if it never goes
  through.
- **Switch to yearly**, or **Switch to monthly**, first asks, saying what switching does now:
  what's left of the period you've paid for counts toward the new price for a period from today,
  and the difference is either charged at once or kept as a credit toward your next payments, with
  the amount and when Pro next bills. **Keep it** changes nothing. Once you switch, the page says
  so until your account bills at the new interval, a few seconds later. You can't switch while a
  payment is failing or a cancel is scheduled, and the button says why.
- **Manage subscription** opens Paddle's page for your subscription in your browser, where you
  cancel it, change how you pay and see your payments. Cancelling stops the next renewal: Pro stays
  until the end of the period you've paid for, and nothing more is charged.
- **Invoices**: once you've paid, each invoice by its date, number and total, with **Download**,
  which opens it in your browser. An invoice Paddle has refunded says **Refunded**, or **Partly
  refunded** where it refunded a part; its total stays what you were billed. The tab lists your
  newest 30, and says so once you have that many: the older ones are in **Manage subscription**.
- A first payment is refunded in full if you ask within 14 days of it, and the
  [Refund Policy](/policies/refund/) says how to ask. Deleting your account cancels Pro at once (see
  [Signing out and deleting it](#signing-out-and-deleting-it)). The
  [Terms of Use](/policies/terms/#moontors-pro) say the rest.

## Reaching your computer from anywhere

With it in your account's plan, your phones reach this computer away from home too, through
Moontors' relay, as they do on the same network, even with Moontors' window closed: while you're
signed in and a phone is paired with this computer, Moontors' background service stays running to
keep it reachable. It comes with Pro; until Moontors sells Pro, it's for the accounts Moontors
invites to test it. Your phone's link inside it is encrypted to this computer's own key, as on your
network, so the relay passes it on without reading it. The **Subscription** tab then shows
**Reachable from anywhere** and **This month**, and the **Account** tab **Phones on your account**:

- **Reachable from anywhere**: whether your phones reach this computer through the relay now, or
  why not: Moontors connecting, your plan without it, or another Moontors signed in to your account
  as this computer. A month's use has its cap, and a day's too: once one is used up, the relay pauses
  until the day or the month turns, and the tab says until when, the day's by its time and the
  month's by its date. Your plan without it, or another Moontors as this computer, is said first,
  even while a cap is used up. On the same network your phones reach this computer as ever.
- **This month**: how much of the month's cap your phones' links through the relay have used, while
  your plan includes it.
- **Phones on your account**: under **This computer**, the phones paired here, each with
  **Remove**, marked **Reachable from anywhere** once it can reach this computer through the relay;
  then each of your account's other computers, by its name, with the phones that reach it through
  the relay, each with **Revoke**, which stops that phone reaching it from anywhere and unpairs it
  there. **Pair a phone…** opens **Phones**.

## Settings sync

Signed in, your computers keep the same settings, each you change on one reaching the others:
**New Session**'s defaults for each agent, the agents' order and the quick actions (see
[New Session](/docs/settings/#new-session)), what the rephrase button does at a click (see
[Rephrase button](/docs/settings/#rephrase-button)), what the Git view's network button does at a
click (see [Fetch, pull and push](/docs/diff-and-files/#fetch-pull-and-push)), and saving in Files
(see [Files](/docs/settings/#files)). Never your projects, folders, presets, the board's layout,
sign-ins or keys: those stay each computer's own. Every account syncs, Free included.

A change goes to your account a couple of seconds after you make it, a burst of changes as one.
Another computer takes it as its window comes to the front, or within the hour while it stays
behind. Where two computers change the same setting, the later change wins. A change made while
Moontors can't reach the server waits and goes with the next sync. A setting a newer version of
Moontors changed in a way yours can't read stays as you have it.

The first time a computer syncs with your account, or with another account, the account's settings
replace its own wherever the account has one, and its own go to the account for the rest. Nothing is
asked.

**Sync settings between your computers**, in **Settings sync** on the **Account** tab, is on to
start with, and it's this computer's own: turned off, this computer sends and takes nothing, keeping
its settings as they are, while your other computers go on syncing with your account. Turned on
again, it takes your account's later changes at once. Signed out, nothing syncs. Deleting your
account deletes the settings it holds; each computer keeps its own.

## Signing out and deleting it

**Sign out**, beside your email, signs this computer out of your account: what your plan gives
through Moontors' server, your phones reaching it from anywhere and their notifications, stops until
you sign in again, which you can at any time. Nothing else changes: signing out doesn't cancel Pro,
which goes on until you cancel it with **Manage subscription**. **Remove Moontors' Data…** signs it
out too (see [Removing Moontors' data](/docs/menus-and-your-data/#removing-moontors-data)).

**Delete account…**, at the foot of the **Account** tab, asks first, in its place: your account, its
sign-in methods and all the server holds for it are deleted from Moontors' server, nothing on this
computer changes, and your phones stay paired, reaching this computer on your network or tailnet as
ever, no longer from anywhere. With Pro, it also says that your subscription is cancelled at once,
with no refund for the rest of its period, or, within 14 days of your first payment, that the
payment is refunded in full (see the [Refund Policy](/policies/refund/)). If Paddle can't be told
just then, nothing is deleted, and the page says so. **Delete account** deletes it, and **Keep it**
keeps it. The server may ask you to sign in again first: your browser opens on its sign-in page, and
the page waits for it as signing in does. Once you're back, the account is deleted. If you sign in
there as another account, nothing is deleted, and the page says so. Your other computers signed in
to the account are signed out, saying so: one your phones reach from anywhere at once, the rest the
next time they read it.