Data Security
Files are stored in Cloudflare R2 and delivered through Cloudflare's network. Account passwords are stored as hashes. Two-factor authentication is available in the account settings.
Each file and folder has a visibility setting. Public files can be fetched by link. Password files ask for the password you set. Private files stay inside the account. A custom domain only serves the bucket you attach to it.
API keys are shown once, then stored so they cannot be read back. A key can be limited to the buckets you select. Delete a key and requests that use it stop.