Deny by default
Every link you share, under your control
Visitors must request access with a verified email. Approve, reject or revoke at any moment — enforced server-side across every browser, device and country.
Global enforcement
State is checked server-side on every visit — incognito included.
Device auditing
IP, geo-location, OS, browser and device model on each request.
Instant revocation
Revoking blocks the visitor worldwide and forces a fresh request.