Data Protection and Security

Private media architecture

Original media is stored on configured private disks. Delivery occurs through authorization-aware application routes or time-limited signed delivery when configured. Private storage paths are not intended for public exposure.

Access and application safeguards

• Authenticated workspace routes remain protected.
• Policies scope gallery and media actions to authorized users.
• CSRF, validation and rate limits protect supported public forms.
• Sensitive credentials remain in server-side configuration.

Processing safeguards

Uploads use validation, queued processing and controlled variants. Biometric consent and deletion operations are recorded through dedicated workflows.

Shared responsibility

Account owners must protect credentials, invitations and devices and configure galleries appropriately. No security program can eliminate every risk. Report suspected security issues through the contact workflow without including passwords or sensitive media.