Your account and signing in

Your account is you, not a store: one account can own or work in several stores. Open Account from the menu under your store’s name, or at the top of Your stores.

Signing in

The sign-in screen offers the quick ways first, one above the other:

• Continue with Apple, Continue with Google and Continue with GitHub send you to that company to confirm who you are, then bring you back signed in. Storeloom never sees your password there.
• Sign in with a passkey uses your fingerprint, face or device PIN, when you have added a passkey (see below).

Below them, after or, you can sign in with your email address and password as before. Forgot your password? emails you a link to choose a new one. Only the newest link works: once you use one, or change your password another way, every other link stops working. If the screen says too many passwords are being checked at once, wait a moment and try again: nothing was changed.

After five wrong passwords in a row, signing in with a password waits 30 seconds, then twice as long after each further wrong one, never more than 15 minutes, and we email you once to say so. Your password still works after the wait, and a reset link, a passkey or Apple, Google or GitHub work during it.

If you come back from Apple, Google or GitHub without being signed in, the screen says why: you cancelled, the sign-in took too long or was opened in another browser, the account has no confirmed email address, or the company could not confirm who you are. Choose a way to sign in again.

Creating an account

Create an account offers the same three buttons above the form. With Apple, Google or GitHub, your account is made with the email address that company has confirmed, so you do not need a confirmation code, and you go straight to creating your first store. With email, you choose a password and confirm your address with the code we email you.

If an account with that email address already exists, signing in with Apple, Google or GitHub opens that same account: it does not make a second one.

Storeloom’s terms

Under the form, Create an account names Storeloom’s three documents, each a link that opens in a new tab: the Terms of service, the Data processing addendum and the Privacy policy. Creating an account, with your email or with Apple, Google or GitHub on that screen, means you agree to the terms of service and the data processing addendum and have read the privacy policy. We keep a record of which version of each you accepted, and when.

Your acceptance covers every store you own or work in: creating another store, or joining one by invitation, does not ask again.

When one of the documents changes, or if your account was made before Storeloom asked (or with Apple, Google or GitHub from the sign-in screen), the admin shows Accept Storeloom’s terms to go on the next time you open it. It lists each new or changed document with its version, its date and a short summary of what changed. Choose Accept and continue to go on, or Sign out. Until you accept, every page waits behind this notice except Account, where you can delete your account, and each store’s Import and export, where you can download your store’s data.

Your name, email and password

At the top of Your account, change your Name and apply it from the bar that appears. A name cannot be left empty: your team sees it.

Change email asks for the new address and your current password, then emails a six-digit code to the new address. Type it and press Confirm the new address. Until then your account keeps its old address; afterwards the old address gets an email saying the address changed, and signs in no more.

The Password card changes your password: type the current one and the new one (at least 10 characters) and press Change password. Your other devices are signed out and the AI apps you connected are disconnected. An account made with Apple, Google or GitHub has no password yet: Set a password emails you a link to choose one.

Emails about your account

We email you when your password changes, when two-step sign-in is turned off, when a passkey is added or removed, when Apple, Google or GitHub is linked to your account, when wrong passwords start a wait, and (at the old address) when your email changes. They come in your admin’s language, as Storeloom’s other emails to you do (a new confirmation code, a password reset link, an invitation, a change to your role); the code sent when you sign up comes in the language the sign-up page was shown in. If it was not you, reset your password at once and sign out every other device.

Stores you work on, and leaving one

Stores you work on lists every store you are a member of, with your role in each. Leave takes you off a store after asking: from that moment you can no longer open it, on any device, and AI apps you connected lose it. Invitations you sent from it stay valid, since they belong to the store. The store’s owners get an email saying you left, and its activity log records it. If you added the store’s card, it comes off the store’s billing as you leave, and the owners are asked to add one. To come back, an owner invites you again.

If you are a store’s only owner, its row offers no Leave: it says so and links to Hand it over: first make another member the owner (see Users), and once they accept you can leave, or choose to leave as part of the handover.

Becoming a store’s owner

When an owner asks you to take over a store, you get an email and Waiting for your answer appears at the top of Your account. It says who asked, whether they stay as an admin or leave, and who pays from then on: whether the store’s card stays until you save your own under Settings › Billing, or is removed so you add one. Accept makes you the owner (after asking); Decline leaves everything as it was, and the owner is told. A request works for 7 days and only for you, signed in to your own account: the email’s link opens Your account, where the request shows only for the person it names.

Deleting your account

Delete account, at the bottom of Your account, deletes your account for good. Type your email address and your password (an account without a password confirms with a code from its authenticator app), then answer the last question, which says it cannot be undone.

While you own a store, the answer is no: the card names the stores you own, each with a Hand it over link. Hand each one over to another member first; once they accept, you can delete your account.

When it is deleted:

• you leave every store you work on, as Leave does, and their owners are told;
• a card you added for a store comes off its billing, also one you kept paying with after handing a store over, and the store’s owners are asked to add one;
• every device is signed out and every emailed link stops working; your passkeys, two-step sign-in, recovery codes and Apple, Google or GitHub links are removed, and AI apps you connected are disconnected;
• if you work on no store when you delete it, and no record of money names you (AI credits you bought or a balance left, apps you develop and their earnings, affiliate commissions and payouts, or a referral), your account is erased: nothing of it remains;
• otherwise your name and email address are removed from your account and from stores' activity logs, which keep what you did, shown as “A former member”, and the records of money stay as the law asks;
• nothing in any store is deleted: products, orders, customers and payments stay as they are;
• a last email to your address confirms it.

Your email address can be used to sign up again, as a new account with nothing from the old one.

Sign-in methods

The Sign-in methods card on Your account lists Apple, Google and GitHub:

• a linked one shows the email address it gave and since when it is linked; Unlink stops it signing you in;
• Link takes you to that company and back, and links it to the account you are signed in to, even when its email address is a different one (a work GitHub account, for example). A notice says it is linked.

Each Apple, Google or GitHub account can open only one Storeloom account. If it already opens another one, linking says so: sign in to that account and unlink it there first.

You can never remove the last way to sign in. If Google is your only way in, Unlink says so: set a password, add a passkey or link another account first.

An account made with Apple, Google or GitHub has no password. The card says so, and Set a password emails you a link to choose one, so you can sign in with your email too.

Two-step sign-in

Two-step sign-in asks for a code from an authenticator app after your password or social sign-in, so a stolen password is not enough. Set up two-step sign-in shows a QR code: scan it with your app, then type the code it shows and press Turn on. You then get ten recovery codes. Keep them somewhere safe: each works once if you lose your phone, and you will not see them again.

New recovery codes replaces them, and Turn off turns the second step off. Both ask for a code from the app; a space in it, as apps show it, is fine, and a recovery code typed in the same box counts as one. A passkey needs no extra step: it is two steps by itself.

If you lose your phone, sign in with one of your recovery codes (Use a recovery code on the sign-in screen). Then, on this card, choose Use a recovery code, type another one and press Turn off. After that you can set two-step sign-in up again on your new phone, which gives you ten new recovery codes. Use the app instead brings the app’s code back.

When you sign in, the code must be entered within five minutes of your password. After that the screen says so and Sign in again starts over; Back to sign in is always under the form.

Signed-in devices

This lists where your account is signed in, with the browser, the country when it is known, the internet address and when it was last used. Sign out ends one, and Sign out all others ends all but the one you are on.

Passkeys

The Passkeys card lists your passkeys with when each was added and last used. Confirm your email address first, then name the passkey (your device’s name is filled in) and choose Add a passkey; your browser or password manager asks for your fingerprint, face or PIN. Remove deletes a passkey, unless it is your last way to sign in.