Recover your order.

The one-time token is removed from the address before it is sent to the server. Order existence is never disclosed by the request form.