A one-time code confirms you're on the access list. Nothing is stored beyond your session.