unlose docs · Operations
Hosted service boundaries
Learn what unlose.sh stores, how authentication works, and which responsibilities remain local.
What it stores
unlose.sh stores encrypted capsules in object storage and keeps account, routing, quota, login, and share metadata in a database. GitHub and Google provider access tokens are not kept as long-lived Unlose credentials.
Boundaries
- Uploads go through the authenticated Unlose origin; storage credentials are never given to the client.
- Hosted objects are bounded. Larger sessions can still move with
unlose exportandunlose import. - Account sessions and unclaimed share links can be revoked from the dashboard.
- Key hosting and title hosting are separate, optional trust choices.
Not a repository backup
The hosted service does not back up your source repository. Keep project files in normal version control and a separate backup system.