Start with a durable signup. Then generate your first debrief inside the app.
Signup also creates an httpOnly session cookie so the app can open without putting your email in the URL.