One email when a confirmed broad reset is recorded. Confirm your address first; every message includes a one-click unsubscribe.
RemindMe
Hear about the reset, not the noise
The policy is intentionally strict: only confirmed broad usage resets are eligible for a notification.
Browser notifications
Delivery needs VAPID keys, a service worker, and an endpoint lifecycle. We will ask for permission only after that pipeline is real.