Account and Licenses

The Pitchblend account control lives at the bottom of the Geist sidebar. If the
sidebar is not available yet, the control appears in the lower-left corner of
the workspace instead.

In a normal packaged Pitchblend app, this control lets you sign in, see which
license is active, and sign out. A source build starts with Identity disabled;
developers can opt in as described in
Developer Mode.

Sign in

1. Select Sign in.
2. Pitchblend opens your default browser at the Pitchblend identity service.
3. Complete the sign-in steps in the browser.
4. When the browser says Pitchblend sign-in is complete. You can return to
   the desktop app., return to Pitchblend.

While the browser flow is open, the desktop button changes to Cancel. Select
it if you started sign-in by mistake or the browser flow cannot be completed.
The button briefly shows Cancelling... while Pitchblend closes the local
callback.

If the button is disabled, its tooltip explains why:

• Pitchblend account is loading means the account service has not finished
  restoring its state.
• Pitchblend sign-in is unavailable normally means Identity is disabled in
  a source build or the account bridge could not be loaded.

Pitchblend never asks you to paste an access token or authorization code into
the desktop app.

Use the account menu

After sign-in, the control shows your avatar or initial and your display name.
Select it to open Pitchblend account actions.

The first line shows either:

• <tier> license, for example Pro license, when the account has an
  active license; or
• No active license when no active license was returned.

This compact menu does not show a raw license key, email address, payment
details, or account identifiers. Memory Sync has a separate license picker
because an account can have more than one sync-eligible license. See
Memory Sync.

Keyboard users can press Down Arrow on the account button to open the menu.
Press Escape, or select elsewhere in the page, to close it.

Sign out

1. Open the account menu.
2. Select Sign out.
3. The button shows Signing out... while Pitchblend removes the local
   session.

Pitchblend clears its local credentials before it attempts the provider's
remote sign-out. The provider may open in your browser to finish signing out.

If protected local credentials could not be removed, the control changes to
Retry sign out. Select it again; it shows Retrying... while it retries.
Do not manually delete credential files unless Pitchblend Support gives you
instructions for your operating system.

Signing out also makes account-bound Memory Sync unavailable. It does not
delete local Geist memories or model files.

What Pitchblend stores

The desktop app keeps identity tokens in its Electron main process, outside the
embedded Geist page. A refresh token is saved only through the operating
system's protected credential storage. The Geist page receives only the safe
information needed to draw this control: display name, avatar, sign-in state,
and limited license summaries.

If protected credential storage is unavailable, a sign-in may last only for
the current app session. Memory Sync remains blocked because it cannot safely
protect this device's sync keys.

For a deeper explanation, read
Identity and Licensing.
For sign-in or license problems, go to
Account and Sync Help.