design scarecrow · COI confirmation landing · v2

/subscriber-confirmed

Where the double-opt-in click lands. Bento already subscribed them before the redirect — this page only has to feel like us, set expectations, and hand them somewhere useful. Anonymous, zero params, nothing to get wrong twice.

A · base state (v1 default)

Tangible

Consider it confirmed

Thanks for the trust. From here on, we'll only turn up in your inbox with something tangible — new plugins, real releases, and first dibs on launch pricing.

✓ A few emails a month — never a few a day
✓ Subscribers hear about launch discounts first
✓ Every email has a one-click way out

See what we make

Changed your mind already? No hard feelings — the unsubscribe link in any email undoes this instantly.

B · reward variant (phase-gated — spec §4: reward issues only after confirmation)

Something tangible is on its way

Confirmed — and as promised, your discount is already headed to your inbox. It's single-use, it's yours, and it applies itself at checkout.

The code arrives in the next email, not on this page — that little dance is how we know this address is really yours.

Pick something to put it toward

Copy rationale unchanged from v1: never render the code on an anonymous page — the reward email is the possession proof; no token handling on this route.

C · dark (ink) — for sites/embeds on dark surfaces

Consider it confirmed

We'll only turn up in your inbox with something tangible.

See what we make

Changed your mind? The unsubscribe link in any email undoes this instantly.

Build notes

Route: /subscriber-confirmed — public, no auth guard, renders with zero query params. Brand-styled on purpose: this is a marketing hand-off moment, not an app screen — subscribers aren't necessarily customers, so app chrome (nav, sign-in framing) stays minimal.
Wiring: the Bento DOI Flow's confirmation link uses Bento's confirmation_url (which performs the subscribe), redirect target = this page. The page confirms nothing; the webhook (/api/webhooks/bento) / reconciler update our row.
No PII in the URL: no ?email=. Optional non-PII ?product=<slug> may later tailor the CTA — omit in v1.
Variant B is phase-gated on the rewards build (spec §4 phase 3); ship A now, flip copy + banner later — same layout.
Distinct from checkout success (§8.2): different audiences, don't merge.
Idempotent-friendly copy: asserts state, never narrates an action — re-clicks land harmlessly.
Fonts: Recoleta (display) + League Spartan (body) — the actual brand faces, self-hosted like the store.