S3-compatible object storage
S3-compatible file storage
Item photos and imported CSV files are kept in a private bucket over the S3 protocol.
Photos and the original file of every CSV import are stored in a private bucket. The app never makes them public: a photo is shown through a signed link that expires.
Uploads are checked on the server first: a photo must really be a JPEG, PNG or WebP image of at most 1 MiB.