Prune unverified accounts

CLAUDE.md

@@ -39,8 +39,16 @@ docker-compose up
 
 # Debug mode with hot-reload
 docker-compose -f docker-compose.debug.yml up
+
+# Manual cleanup of unverified accounts
+docker exec timetrack-timetrack-1 python cleanup_unverified_accounts.py
+
+# Dry run to see what would be deleted
+docker exec timetrack-timetrack-1 python cleanup_unverified_accounts.py --dry-run
 ```
 
+**Note:** Unverified accounts are automatically cleaned up every hour via cron job in the Docker container.
+
 ## Database Operations
 
 ### Flask-Migrate Commands
@@ -187,6 +195,7 @@ When modifying billing/invoice features:
 - Two-factor authentication (2FA) using TOTP
 - Session-based authentication with "Remember Me" option
 - Email verification for new accounts (configurable)
+- Automatic cleanup of unverified accounts after 24 hours
 
 ### Mobile UI Features
 - Progressive Web App (PWA) manifest for installability