Replied to email leaked my email token

can this cause any harm?

I’m not sure if this helps but I believe (really not sure) that the email token just identifies the email. So in that case the answer is no.

:wave: Welcome!

No need to worry - the tokens here only identify the email and all actions still require that you are logged in.