Security and Privacy
- Uploaded and generated files are kept in private storage and opened through signed, time-limited links.
- Previews and generated HTML content are served from an address that is separate from the main app and keeps no cookies.
- Desktop Chats, attachments, and generated files stay on the user's disk.
A signed link is an address that opens only one specific file, and only for a short time. An expired link stops working; when you open the file again, MORATUS creates a new link. That way, an old link left somewhere doesn't give lasting access to your file.
Where your files live
| Platform | Location | Access |
|---|---|---|
| Web and Mobile | Private storage | Through signed, time-limited links |
| Desktop | Your own disk | Your working folder or Documents\Moratus (see Where your data lives) |
| Web Design and App Development projects | Cloud sandbox | From the project workspace; on Desktop the files aren't downloaded to disk |
Web project previews are served at preview.moratus.ai, an address separate from the main app that keeps no cookies. Even if a previewed page contains malicious code, it can't reach your account's session or cookies.
- Desktop The interface has no Node access; only the local runtime writes to disk.
- Desktop When you delete a chat, its checkpoints are deleted too; files saved to the working folder stay in the folder.
- For attachment size and type limits, see Limits and Quotas.
Frequently asked questions
- Do file links stay open forever? No. Files are opened through signed, time-limited links.
- Are files I generate on Desktop uploaded to the cloud? No. Chats, attachments, and generated files stay on your disk. Web Design and App Development projects run in the cloud sandbox.