Why we emailed you about a new sign-in

When your account is signed into from a device or a location it has not been used from before, we email the address on the account.

What the email tells you:
• The browser and operating system the sign-in came from.
• The country, when we can tell.
• What to do if it was not you.

Where the information comes from:
The device and location are read from the request our servers actually received, not from anything the browser claims about itself. That matters: a browser can say whatever it likes about what it is, so a notice built on that could be made to look familiar by someone who wanted to avoid alerting you.

If it was you:
Nothing to do. You will not get another email for that device.

If it was not you:
Follow "Someone else may be in my account" — sign out everywhere, then change your password.

When you will NOT get one:
• Signing in again from a device you have used before.
• Your first ever sign-in, which has nothing to compare against.

We send this to the email on your account and nowhere else. It is a security notice rather than a marketing message, so it is always delivered and has no unsubscribe link.