Emailed links
The five console screens reached without signing in: account activation, password recovery, password reset, project invitation and organization invitation — what each link carries, how long it lives, and why none of them exists on an installation without SMTP.
Profile
The profile page: the profile picture and the formats and size it accepts, the name and surname shown across the platform, the email that cannot be changed, and the marketing consent where an installation collects one.