Saga Emails

Saga sends one email today: Reset your password, through Resend from hello@saga.pictures. Below is that email as it renders, rendered by the builder in src/server/lib/email.ts, then what launch needs from the code, then drafts of the rest in the same frame.

Today: Reset your password

The real HTML from resetPasswordEmail(). Only the image host is rewritten so the artifact can show the pictures. The email itself doesn't change between light and dark mode: it's dark by design, and only the mail app around it changes.

Subject

Reset your Saga password

Preview line

Choose a new password for your Saga account. The link works for one hour.

From → To

Saga <hello@saga.pictures> → sam@example.com

Sent from

emailAndPassword.sendResetPassword

In the inbox

Reset your password

Open the link below to choose a new password for your Saga account.

https://saga.pictures/reset-password?token=q7Hc2vX9rLmP4tKa8WnYd3Fs

This link works for one hour. If you didn't ask for this, ignore this email.

Saga · saga.pictures

What breaks in real mail apps

• FixApple Hide My Email drops itApple-only accounts get the reset email too (auth.ts), but Apple's relay refuses senders that aren't registered. Register saga.pictures and hello@saga.pictures under Sign in with Apple for Email Communication. SPF on send.saga.pictures and DKIM (resend._domainkey) are already in place, which Apple checks.
• FixReplies go nowhereNo reply_to is set, and saga.pictures has no MX record, so a reply to hello@saga.pictures bounces. Add reply_to: support@osroc.io in sendEmail (or route hello@ with Cloudflare Email Routing).
• FixNo DMARC record_dmarc.saga.pictures doesn't exist. Gmail and Yahoo require DMARC from bulk senders and weigh it for everyone. Start with p=none and a report address.
• FixThe preview line runs into the bodyThe preheader has no filler after it, so Gmail and iPhone Mail continue with "Reset your password Use the button below…" (see the rows below). Pad it with &zwnj;&nbsp; pairs.
• FixOutlook for WindowsIts Word engine ignores max-width (the email stretches to the window), border-radius (square panel and button) and padding on the link (the button shrinks to a tight box around the words). Wrap the 600 px table in an MSO-only table and put the padding on the button's cell.
• FixThe poster band is 647 KBposters.png is 1200 × 460 with its background baked in, so it needs no transparency. As an 80% JPEG it's 128 KB: it loads before the button on cellular instead of after.
• WatchDark-mode inversionDark by design, so Apple Mail and Outlook leave it alone. Gmail's apps can still recolor dark email; logo.png is bone on transparent, so on a lightened background it disappears. Check once in the Gmail app in dark mode, or give the logo a basalt background.
• WatchGmail drops the <style> blockIn the Gmail app with a non-Google account, the 480 px media query is ignored and the panel keeps 40 px padding on phones. It still reads fine.
• FinePictures blocked by defaultOutlook and some corporate Gmail block images. Both have alt text and the email reads the same without them (see Pictures off).
• FineGmail clipping4.9 KB of HTML against Gmail's 102 KB clip. Far under.
• FinePlain-text partMatches the HTML and keeps the raw link on its own line.
• FineRate limits3 reset emails per address and 10 per IP every 15 minutes (in the Durable Object's memory).

The launch list

From the code: better-auth has email and password, Google and Apple, Change password and Delete account; no email verification and no Change email. The app has an in-app inbox for follows, requests and invites; reports go to a CLI. Every candidate, kept, deferred or cut:

Drafts for launch

Same frame as the reset email: logo, poster band, granite panel, one ochre button at most, footer. Real copy, ready to ship as written. In build order.

New report on @nightowl_88

Reason: Harassment
Note: Keeps leaving the same insult on everything I rate.
Reported: @nightowl_88 · Night Owl
By: @mara
Report: #212 · 3 open reports

Review it: API_URL=https://saga.pictures ADMIN_TOKEN=… pnpm admin:reports

The Terms of Use promise a review within 24 hours.

Your password was changed

The password for your Saga account (sam@example.com) was changed on Oct 9, 2026 at 9:42 PM UTC. Your other devices were signed out.

If you did this, there's nothing else to do. If you didn't, reset your password now:
https://saga.pictures/reset-password

Need help? Email support@osroc.io.

Saga · saga.pictures

Your account was deleted

We deleted your Saga account and everything in it: your swipes and library, your lists, your profile and photo, and your follows.

Your username, @sam, is held for 30 days. After that, anyone can claim it.

This can't be undone. To use Saga again, sign up for a new account.

Didn't delete your account? Email support@osroc.io.

Saga · saga.pictures

Welcome to Saga, Sam

Confirm this is your email, so we can send you a reset link if you ever forget your password:

https://saga.pictures/api/auth/verify-email?token=eyJhbGciOiJIUzI1NiJ9.c2FtQGV4YW1wbGUuY29t&callbackURL=%2F

This link works for 24 hours. If you didn't sign up for Saga, ignore this email.

Saga · saga.pictures

My recommendation

Five emails and two settings at launch, in this order. Everything else waits for the feature it belongs to, or for #289 to pick a channel.

1. Fix the reset email and the domainreply_to support@osroc.io, preheader filler, Outlook button and width, the poster band as JPEG, a DMARC record.
   Template only, plus one DNS record
2. Register Apple's private relaysaga.pictures and hello@saga.pictures under Sign in with Apple for Email Communication. Without it, none of these reach Apple users who hid their address.
   Owner, Apple Developer, no code
3. New report (to support)Keeps the 24-hour promise without checking the CLI daily. Closes the open item in #43.
   Small server hook in reportService.create, template
4. Password changedFrom Settings and after a reset. The one warning someone gets when another person takes over.
   Server hook (hooks.after, onPasswordReset), template
5. Account deletedSent after the rows are gone; skipped for Apple relay addresses.
   One line in afterDelete, template
6. Confirm your emailEmail sign-ups only, never blocks sign-in, doubles as the welcome. Last because it adds a setting, a landing line and a resend limit.
   better-auth setting, template, small app change
7. Move to Resend Pro before launch dayThe free plan stops at 100 a day.
   Owner, $20 a month