Files on Your Websites

Show a picture, a video, a brochure, or a whole folder from Files on your own website or app. You publish it, paste a snippet into your website, and turn the link off whenever you like.

Turning It On

Showing files on websites is off until an owner or admin turns it on. Open Files, then Settings (the last item in the Files menu), and find Files on Your Websites. Select Turn On.

Turning it off again stops every published link at once. Your links are kept, so turning it back on makes them work again.

The same card lists everything published now: each file or folder, the websites it may show on, who published it, and when, with Turn Off for each one.

Turning embedding on or off is action core.files.embeds.allow, and the card's list is action core.files.embeds.settings. Both are for owners and admins only.

Publishing a File or a Folder

• A file: select More on the file, then Embed.
• A folder: open the folder and select Embed. This works for your own folders and for the folders Files keeps for your records, like a project's (Organized for You).

Select Publish for Websites. You get:

• Link: the file's public address. Anyone with it can see the file.
• Snippet: the code to paste into your website. A picture becomes a picture, a video plays with controls, a sound plays with controls, and anything else (a PDF, a document) becomes a download link with the file's name. A folder becomes a small gallery: pictures and videos in a grid, other files as download links. Files you add to the folder later show in the gallery too.

Select Copy beside either one. A file or folder that is published shows On a website beside its name.

Whoever may change a file (or a folder) may publish it. Someone who may only look at it sees the link, but cannot publish it, change it, or turn it off. AI agents and API keys never publish files.

Publishing is action core.files.embeds.create, and the Embed window is action core.files.embeds.get. Every publish is written in the Activity Log.

Only on Your Websites

Under Only on these websites, list the websites the file may show on, like example.com, shop.example.com. A website covers its parts as well, so example.com also allows www.example.com and shop.example.com. Leave it empty to let the file show anywhere. Select Save Websites to change the list at any time (action core.files.embeds.update).

This check is best effort. It uses the website address the visitor's browser sends with each request. A request that names no website at all, such as someone opening the link directly or a browser set to hide where it came from, is let through, the way most hotlink protection works. A website that is not on your list is refused.

Turning a Link Off

Select Turn Off Link in the Embed window, or Turn Off beside it in Files' Settings (action core.files.embeds.off). The link stops working everywhere it is used. A browser or our network may still show a copy it already kept for up to 10 minutes. A link that is turned off never works again; publish the file again to get a new link.

A published file also stops showing when it is deleted, and a folder's gallery stops when the folder is deleted.

How Files Are Sent

• Files come straight from your own workspace's storage, decrypted as they are sent, the same way as a download.
• Videos and sound play from any point without downloading the whole file.
• Browsers and our network keep a copy for 10 minutes, so a busy page does not send the same picture again and again. A copy is checked against your websites list the same way.
• Only pictures (PNG, JPEG, GIF, and WebP), sound, video, and plain text show in place. Anything else, including web pages and SVG drawings, is always a download, so nothing in a file can run on a page.
• Each time a published file is shown is not written in the Activity Log, since a public picture can be seen thousands of times. Publishing, changing the websites, and turning a link off are.
• For apps: a folder's address with ?format=json added lists its files, each with its name, type, size, and address.

Usage and Billing

What your websites show counts on Usage as Embedded File Delivery: every byte your workspace sends for a published file, counted as it is sent. Each request also counts as one action, like any public page (Usage). Copies browsers and our network already kept are sent without reaching your workspace, so they are not counted, and you are never charged for them.

Each app includes 12.5 GB of Embedded File Delivery a month, and the Company Plan includes 50 GB. Beyond that it is $0.05 for each extra GB.