Planned account safeguards
The intended access flow includes email verification, server-managed sessions, password recovery, logout and Sign in with Google. Their presence in requirements is not proof that they are active; each needs connected server behavior and recoverable error states.
Protect your details
- Use only the verified Trade-win domain and inspect the address before entering account information.
- Keep passwords and verification or recovery codes private.
- Do not upload identity documents to public pages or unverified support channels.
- If a future session expires, return through the published sign-in path rather than following an unexpected link.
Check availability first
The current account pages explicitly say that credentials are not collected. If a page makes a different promise, stop and compare it with Service status and Security before proceeding.