Settings
All user-level configuration lives in the Profile Settings modal — implemented in frontend/src/components/ProfileSettingsModal.jsx and reachable from the user-menu avatar in the header. Four tabs.
Profile
profile.* keys in frontend/src/i18n/en.json.
- Operator name — your display name in the workspace.
- Avatar — uploadable image, with a default initials avatar.
- Nickname — used for AI chat addressing and shared permalinks.
- Email — login identity. Changing it triggers a verification mail; the new address only becomes the login after confirmation.
Appearance
appearance.* and a few localization.* keys.
| Setting | Values |
|---|---|
| Color theme | Dark, Light |
| Density | Compact, Comfortable |
| Language | EN, DE, ES, FR, RU, ZH (in-app UI; docs are English-only) |
| Timezone | IANA tz database |
The timezone setting affects every panel that renders timestamps — quotes, news, alerts, timeline. Stored server-side so it follows you across devices.
Security
security.* keys. Covers password management.
Change password
Two ways to change your password: the in-app Change password form (current password + new password, no email round-trip), or the email password-reset flow if you're locked out — request a reset and follow the link mailed to you (reset tokens are valid for 60 minutes by default; email delivery must be configured for the mail to arrive).
Two-factor authentication
2FA is not yet available. The two-factor toggle in Settings is a cosmetic placeholder only — there is no TOTP enrollment, no recovery codes, and no backend enforcement, so it does not protect your account. It is planned for a future release.
For the OSINT-focused threat model around account isolation and session hygiene, see the OSINT operational security guide.
Subscription
subscription.* keys. Powered by Stripe via backend/routes/subscriptions.py and backend/routes/stripe_webhook.py.
- Current plan — name, status, renewal date.
- Usage — feature flags lit for your tier (realtime, OSINT, alerts, export).
- Manage — opens the Stripe customer portal for invoices, payment methods, plan changes, cancellation.
- See all plans — links to the pricing page.
Account deletion
Reachable via Delete account in the user menu. Two-step confirm. Deletion is hard — portfolios, watchlists, alerts, and saved screens are all removed. There's no soft-delete grace period at present.