Reliable email delivery is a fundamental part of any platform. Password resets, email verification, and welcome messages need to arrive every time. Last week, they didn't — our SendGrid integration was a placeholder that never sent a single message.

We've ripped out the placeholder and replaced it with production-grade email delivery powered by Cloudflare Email Workers. Every transactional email now routes through Cloudflare's infrastructure — deliverable, trackable, and secure.

What changed? For starters, password reset now works end-to-end. Request a reset, receive the email, set a new password, and get back into your account. Email verification follows the same flow — verify your address during registration or from your account settings.

Behind the scenes, reset tokens are hashed with SHA-256 before storage, expire after 60 minutes, and are single-use. Successful resets invalidate all existing sessions and the used_at column prevents token replay attacks.

Welcome emails are sent immediately after account creation (fire-and-forget, never blocking the registration response). Every outgoing email uses the [email protected] sender, verified through Cloudflare's email routing.

This is part of our ongoing investment in account security and communication reliability. Next up: richer email templates with session details, billing receipts, and customizable notification preferences.

We've also added contact form persistence alongside the email delivery. Submissions now get a reference number and are stored in the database, so our support team can track every inquiry from submission to resolution.