Where Your Files Live

Uploads do not pass through us

When you upload, your browser asks for a short-lived permission slip and then sends the bytes directly to object storage. The file never travels through our application servers. That is why a large upload is as fast as your connection allows rather than as fast as our queue allows, and why an interrupted upload leaves nothing half-written in your project.

The permission slip is good for fifteen minutes and only for the one address it was issued for. When the upload finishes, we look at the bytes that actually arrived — the real size and the real file type — rather than believing what the browser said it was sending.

What a link really is

Every image and video you see in the app is shown through a signed address with an expiry on it. Think of it as a long, unguessable URL rather than as a locked door. We do not publish these addresses and they are not listed anywhere, but if one is copied out of the app, whoever holds it can open the file for as long as it is valid.

That is worth knowing before you paste a preview link into a group chat. If you want to show someone a finished clip, use the share button instead — that produces a proper page with a stable address you can reason about, and it is covered in its own guide.

The addresses are deliberately long-lived and stable rather than rotated every few minutes. A URL is also a browser's cache key: an address that changes constantly means your own gallery re-downloads every thumbnail every time you open it.

Material we hand to a model service

To generate anything from a reference — a character sheet, a location plate — that reference has to be fetchable by the service doing the generating. So we publish a copy of it at an address that service can read, and hand over the address.

Two consequences worth being plain about. First, a published reference is readable by its address, not just by us. Second, it may be copied into storage in whichever region the model service runs in, which is not necessarily the region your account's own data sits in. If you are working with material that must not leave a particular jurisdiction, that is the constraint to weigh before uploading it.

What counts against your storage

Only what you upload. Every image and video we generate for you — setup images, every take of every segment, every composited episode — is stored at our expense and does not consume your quota. The quota exists to bound how much raw material one account parks with us, not to meter the thing you came here to make.

The quota is reserved at the moment the upload is authorised and given back when you delete. An upload you start and abandon leaves its reservation behind for a while; a background job reconciles those away, so the number settles back to what is actually stored.

What deleting does

Deleting an asset, an episode or a project takes it out of your account straight away. The underlying file goes into a cleanup queue and is removed later rather than on the spot.

The delay is not a recycle bin. There is no restore — not in the app, and not by asking. The window exists for our own operational safety, and nothing about it is a service we offer you. Treat deleting as final.

Before a file is actually removed we check whether anything still points at it. Copying a character into another project shares the same underlying image, and an episode override can be the same file as something in your library. If a reference is still live, the removal is dropped and the file stays.

Closing your account

Closing an account erases the personal details on it — the address it was registered with, the phone number, the profile — and replaces them with a tombstone. The account row itself is kept, because orders, payments and the credit ledger have to remain auditable and they reference it.

Two things to know before you do it. Any remaining credits are cleared and are not refunded. And the objects belonging to the account are queued for removal, which is the same one-way street as any other delete.

FAQ

Updated October 2, 2026