east115 Account Guard

Go to Settings - Prevent Account Sharing, enter the user's ID or login name in the unbind tool, and clear their bindings. They log in again on the new device.

Yes. The device identifier lives in a browser cookie; clearing cookies, switching browsers, or incognito mode all register as new devices. This is the intended anti-sharing behavior. Legitimate users can be unbound by an admin.

Yes. One anonymous cookie named eastacgu_device (random 32-character hex string, HttpOnly, one-year lifetime). It only distinguishes devices, contains no personal information, and is never sent to third parties.

No. Heartbeat writes are throttled to once per 60 seconds per session; every check uses native WordPress sessions and user meta. No polling, no external requests.