Integrity checks during upload, size limits, temporary server storage and file type checks.
Legal and support
Security model
Souborovna protects uploads, downloads, accounts and the audit of moderation actions, while keeping the service simple to use.
Link expiry, download limits, optional passwords and protection against password guessing.
Every admin action, report and file restriction can be traced.
Sign-in and sessions
We store passwords only as hashes. Sign-in cookies are httpOnly, secure in production and bound to the service domain. Sign-in uses verified endpoints with protection against forged requests.
Encrypted transfer
HTTPS protects transfers between the app, website and Souborovna servers. The server creates previews and playback streams, so we do not describe the service as end-to-end encrypted: that would mean the server could not access the contents.
Infrastructure
Files are stored outside the public web directory. Only authorised roles can access the admin interface. We publish the service’s operational status on the Service status.
Report a security incident or harmful content: Report form.