Customer portal

Look up with email + order code, or request a magic link (returned in-browser for local setups — wire SMTP in production).