I've spent an hour trying to log in. A few times, it logged me into what seemed to be a newly-generated account (perhaps, because I had to change the email address - the required authentication codes would not get sent to my old one), associated with the same phone number. Since I cannot log into my old account for whatever reason, I do not even know if it exists anymore and what data is stored on me. This is against GDPR and a huge waste of my time. I hope one day companies will learn that 2-factor authentication creates more problems than it solves. Is being able to log into one's account really too much to ask for?