Account settings previously displayed the erasure button and irreversible warning even while asking visitors to sign in. Show that entire section only after an email-linked account is loaded, matching password and sign-out controls. Guests, anonymous sessions and loading/missing accounts do not see the section.

Do not change backend authentication or erasure permissions. Linked users keep email-code confirmation, typed confirmation, cancellation and retry behavior. Already-confirmed anonymous deletion cleanup can still resume after restart; do not strand a pending erasure operation by hiding its recovery dialog.

Observed Red: the anonymous visitor regression found a visible account-delete control. Green: the action/warning disappear for guests and remain available for linked accounts. Tests retain mailbox verification, double-submit handling, failed-code retry, cancellation and pending cleanup coverage. Maestro flows are non-destructive and explicitly separate visitor and linked-session fixtures.

No account sign-out, collection changes, migration, deployment or emulator installation is part of this fix. No native files or dependencies changed.