User

Their WorkOS profile picture (an https URL of at most 2,048 characters), stored at each sign-in, browser or pando login, and refreshed every time (a removed picture becomes null). Null when there is none or it is not https: the web draws one. Pando never fetches, proxies or caches it.