Handle file uploads as untrusted input
A safe upload flow for size and type limits, private object storage, authorization, download links, quotas, and deletion.
TAG INDEX
privacy
Guides connected by this idea.
3 pages
Observe production errors without collecting too much data
Set up a small, privacy-aware production signal set that helps you detect user-visible failures and find their causes.
Privacy by default for a small product
A data-minimization workflow for deciding what to collect, where it goes, who can access it, and when it should be removed.