The desk, hosted
Your email, and a link comes to it. Only an operator's address gets past this page.
Nothing here stores your password, because there is none. The link signs you in on this device for seven days; the desk stamps your name on what you save.