The same leak, on the three other pages that had it: your Out Here link, and both unsubscribe pages.
- Yesterday's fix took your crew link out of the crew page's own head markup. The page your people open to follow you live had the identical problem, and worse: it published your link three times, not twice. The third one was the banner that offers to open the app, which carried the whole address as its argument.
- All three tags are gone from that page. The canonical link and the share URL now point at the page that describes Out Here, which is public and carries nothing about you. Tapping your link on an iPhone still opens the app straight to your session, because that has always been handled by the link itself rather than by anything printed on the page.
- The unsubscribe pages had it too. That link is a different kind of key: it names one person's account, and an unsubscribe address is about the most forwarded and most machine-fetched address a product has. Both pages now name navrun.app and nothing else. There is no public version of "you are about to stop these emails", so they point at the site rather than borrow some other page's subject.
- The check that catches this reads the rendered page and sweeps every tag in its head, so the next tag to carry a link fails it the day it is written. That is how the third tag on the Out Here page was found.