/ Information
Account Tiers
Your access level depends on your account status. You can always check your current status in Settings → Account.
block
Banned
Your IP or account has been blocked. You cannot access VAULT or any of its content. If you believe this is a mistake, contact support from a different connection.
BANNED
person_outline
Guest
Not signed in. You can browse public groups and view public files. Downloads are rate-limited to 3 per minute. You cannot upload, join groups, or use private spaces.
GUEST
schedule
Unverified
Signed in but email not verified. Download limit is 5 per minute. You can upload files up to 100 MB if you are already a group member, but you cannot create or join new groups. Verify now →
UNVERIFIED
verified_user
Verified
Email confirmed. No download rate limits. Upload files up to 500 MB. Create up to 50 groups. Join any public group or any private group you have been invited to. Full access to all features.
VERIFIED
auto_awesome
Google accounts start as Verified
If you signed in with Google, your email is pre-verified. You get Verified tier access immediately without any extra steps.
compare_arrows
Feature comparison
Feature GUEST UNVERIFIED VERIFIED
Browse public groupscheck_circlecheck_circlecheck_circle
View public filescheck_circlecheck_circlecheck_circle
Download filesremove_circle 3/minremove_circle 5/mincheck_circle unlimited
Open support ticketscancelcheck_circlecheck_circle
Upload filescancelremove_circle 100 MB maxcheck_circle 500 MB max
Create groupscancelcancelcheck_circle up to 50
Join groupscancelcancelcheck_circle
Access private groupscancelcancelcheck_circle if invited
Star / favorite groupscancelcheck_circlecheck_circle
Delete own filescancelcancelcheck_circle
Verify your email
Verification takes about a minute and unlocks full access.
warning
Required for most features
Without a verified email you cannot create groups, join groups, delete files, or upload more than 100 MB. Verification is free and instant.
mark_email_read
How to verify step by step
1
Go to Settings → Account
Open Settings and look for the Email Verified row. It will say "No — limited access" if you are not yet verified.
2
Click Verify
A verification email is sent to your inbox immediately from noreply@stepf-64a7a.firebaseapp.com.
3
Check your inbox (and spam)
The email arrives in under two minutes. If you do not see it, check your spam folder. The sender is noreply@stepf-64a7a.firebaseapp.com — mark it as not spam.
4
Click the link in the email
Clicking the link opens a page in your browser confirming your email. The link is valid for 1 hour. If it expires, go back to Settings and send a new one.
5
Sign out and sign back in
This step is required. Your browser holds an old auth token that still says unverified. Signing out and back in gets a fresh token. After that you will have full Verified access.
quiz
Common problems
inbox
Email not arriving
Check spam. Sender is noreply@stepf-64a7a.firebaseapp.com. Some corporate or school email accounts block automated emails — use a personal Gmail or Hotmail address if this is an issue.
refresh
Still shows Unverified after clicking the link
You must sign out and sign back in. The page does not update automatically. Your session token is cached and VAULT cannot force a refresh without you signing back in.
link_off
Link expired or already used
Links expire after 1 hour. Go back to Settings and click Verify again. Each click sends a fresh link. You can do this as many times as needed.
Changing your email
Email changes go through a two-step verification process to protect your account.
security
Your old email will be notified
When you request a change, Firebase automatically sends a security alert to your current email address. This is mandatory and cannot be disabled — it protects you from unauthorized changes. If you did not request the change, you can cancel it from that email.
swap_horiz
How email change works
1
Go to Settings → Account → Email Address → Change
If your account uses email/password, you also need to enter your current password to confirm your identity.
2
A verification link is sent to the NEW email
Nothing changes yet. Your current email is still active. The new email receives a link to confirm the change.
3
Your OLD email receives a security notice
This is automatic. The notice contains a link to cancel the change if it was not requested by you.
4
Click the confirmation link in the NEW email inbox
Only after this click does your email actually change in the system.
5
Sign out and back in with the new email
Required to refresh your auth session. Use the new address and your existing password.
warning
Things to know
  • infoIf you no longer have access to your old email, contact support before attempting to change it.
  • infoThe new email must not already be in use by another VAULT account.
  • cancelGoogle accounts cannot change their email through VAULT settings. Change your email in your Google account instead — VAULT reads it from there automatically on next sign-in.
  • cancelDo not use a temporary or disposable email. It will fail verification and cause login issues.
  • infoAfter a successful email change, you will need to re-verify your new email before regaining full access.
Password & Security
How to change your password, reset it, and keep your account secure.
key
Changing your password
1
Go to Settings → Account → Password
You need to enter your current password first. This confirms your identity before allowing the change.
2
Enter a new password
Use at least 8 characters. A strong password mixes letters, numbers, and symbols. Avoid reusing passwords from other sites.
3
Save and sign back in
After saving, you may be signed out. Sign back in with the new password.
lock_reset
Forgot your password
1
Go to the login page
At login.html, click "Forgot password?" under the sign-in form.
2
Enter your email address
A password reset email is sent to that address immediately. Check spam if it does not arrive.
3
Click the link in the email
You are taken to a page where you can set a new password. The link expires after 1 hour.
info
Google accounts do not have a VAULT password
If you signed in with Google, your password is managed entirely by Google. Use Google's account recovery process if you lose access.
shield
Security tips
  • check_circleUse a unique password for VAULT that you do not use anywhere else.
  • check_circleKeep your email address accessible — it is used for account recovery and security notices.
  • check_circleIf you receive a security email you did not expect (email change notice, password reset), act on it immediately.
  • cancelNever share your password or account with anyone. VAULT staff will never ask for your password.
  • cancelDo not use the same password as your email account. If your email is compromised, your VAULT account could be too.
Groups
Groups are shared storage spaces. You create them, invite people, and upload files together.
folder_copy
What is a group

A group is a shared folder where members can upload and download files. You can create your own groups or join groups that others have created and invited you to.

Groups can be public — anyone can browse and download files from them without signing in. Or they can be private — only invited members can see anything inside, including the file list.

The person who creates a group is the owner. Only owners can rename the group, change its description, set announcements, invite and remove members, and delete the group.

how_to_reg
Joining groups
  • check_circlePublic groups — click Join on the group page. You are added immediately. No invite needed.
  • check_circlePrivate groups — the owner must invite you by email from the group's member panel. You gain access after they send the invite.
  • cancelYou cannot join any group without a verified email address. Verify first in Settings.
  • infoYou can leave a group at any time from the group page (Leave button) or from Settings → My Groups.
  • infoThe owner can remove you from a group at any time. You lose access to all files in that group immediately.
manage_accounts
Owner vs Member permissions
ActionMemberOwner
Upload filescheck_circlecheck_circle
Download filescheck_circlecheck_circle
Delete own filescheck_circlecheck_circle
Delete any filecancelcheck_circle
Rename group / set descriptioncancelcheck_circle
Set group announcementcancelcheck_circle
Invite memberscancelcheck_circle
Remove memberscancelcheck_circle
Change public/private settingcancelcheck_circle
Delete the groupcancelcheck_circle
delete_forever
Deleting a group permanently deletes all its files
There is no recycle bin. If you delete a group, every file inside it is gone immediately and cannot be recovered. Download anything important before deleting.
Files & Uploads
What you can upload, size limits, and how storage works.
upload_file
Upload limits
Account tierMax file sizeCan upload?
Guestcancel No
Unverified100 MB per fileremove_circle If already a member
Verified500 MB per filecheck_circle Yes
  • check_circleFile types: any format is accepted — images, videos, audio, archives, executables, documents, code, fonts, 3D models, and more.
  • infoThere is no per-account total storage limit right now. Individual file size limits apply per upload.
  • infoYou can upload multiple files at once by selecting several or dragging a batch onto the drop zone.
  • cancelFiles that violate the conduct rules may be deleted without notice.
preview
File previews

VAULT can preview certain file types directly in the browser without downloading:

  • check_circleImages: JPG, PNG, GIF, WebP, SVG, AVIF
  • check_circleVideo: MP4, WebM, OGG
  • check_circleAudio: MP3, WAV, OGG, FLAC
  • check_circleText/code: TXT, MD, JS, HTML, CSS, JSON, and more
  • remove_circlePDF: shown as download (browser PDF viewer opens separately)
  • cancelAll other formats trigger a download directly
delete
Deleting files
  • infoOnly verified users can delete files. Unverified users and guests cannot.
  • infoIn a user group: members can delete their own uploads. The group owner can delete any file.
  • cancelDeletion is permanent. There is no undo and no trash can.
Sharing
How share links work and what they expose.
link
Share links

Every file in VAULT has a share link — a short URL like stepf-64a7a.web.app/s/abc12345. Anyone who has this link can view the file info page and download the file.

Share links are generated automatically when you click the share icon on a file. You can copy the link and send it to anyone — they do not need a VAULT account.

The share link page shows the file name, size, which group it belongs to, and a download button. The original Firebase Storage URL is never shown — all downloads go through VAULT's server to hide the internal URL.

Download counts are tracked per share link so you can see how many times a file has been downloaded.

visibility
Share links for private group files
A share link for a private group file still works for anyone who has it — the link bypasses the private group membership check. Only share links to files you are intentionally making public. If you want to revoke access, you need to delete the file itself.
download
Download rate limits via share links

The same rate limits apply when downloading via share links:

  • remove_circleGuest: 3 downloads per minute across all share links
  • remove_circleUnverified: 5 downloads per minute
  • check_circleVerified: no limit
Conduct
Rules that apply to everyone using VAULT, regardless of account tier.
thumb_up
Allowed
  • check_circleStore and share files you own or have rights to distribute.
  • check_circleCreate groups for projects, teams, or personal archiving.
  • check_circleShare links publicly or keep your group private.
  • check_circleUpload any legal file format including executables, scripts, and compressed archives.
  • check_circleContact support if something is broken, unclear, or unfair.
do_not_disturb
Not allowed
  • cancelMalware — no viruses, ransomware, spyware, keyloggers, or software designed to harm others.
  • cancelPiracy — no pirated software, cracked games, or copyrighted material you did not create or license.
  • cancelIllegal content — nothing illegal under Swedish or EU law.
  • cancelAbuse — no automated bulk uploads, API scraping, or attempts to overwhelm the service.
  • cancelBan evasion — creating new accounts to bypass a ban is not allowed and may result in broader IP blocks.
  • cancelImpersonation — do not create groups or upload content pretending to be someone else.
  • cancelSharing private data — do not upload other people's personal information without their consent.
gavel
Enforcement
Violations can result in your files being deleted, your groups being removed, your account being banned, or your IP being blocked. Serious violations — malware, illegal content — are actioned immediately without warning. For minor violations you may receive a warning first.
Privacy & Data
What VAULT collects, why, and who can see it.
database
What we collect
  • infoYour email address — used for login, verification, and account security notices. Never shown to other users.
  • infoDisplay name — shown in group member lists and ticket threads. You set this yourself in Settings.
  • infoSign-in provider — whether you use email/password or Google. This determines which login method to show you.
  • infoGroup memberships — which groups you belong to and in what role. Visible to other members of those groups and the group owner.
  • infoFiles you upload — stored in Firebase Storage. Accessible to group members (private groups) or everyone (public groups).
  • infoSupport ticket content — your messages are stored in Firestore and visible only to you and support staff.
  • infoFavorites / stars — stored privately. Only you can see what you have starred.
psychology
Why we collect it
  • check_circleEmail — to authenticate you, verify your identity, and send security alerts for account changes.
  • check_circleDisplay name — so group members can identify each other without exposing email addresses.
  • check_circleGroup data — to manage access control for private groups and shared storage.
  • check_circleFiles — because storing and sharing files is the entire purpose of VAULT.
  • check_circleSupport tickets — to allow communication between users and support staff for resolving issues.

We do not sell your data. We do not use it for advertising. We do not share it with third parties except Firebase (Google) which hosts the infrastructure.

visibility
Who can see what
DataPublicGroup membersGroup ownerSupport staff
Your email addresscancelcancelcancelcheck_circle
Your display nameIn public groups onlycheck_circlecheck_circlecheck_circle
Public group filescheck_circlecheck_circlecheck_circlecheck_circle
Private group filescancelSame group onlycheck_circlecheck_circle
Your support ticketscancelcancelcancelcheck_circle
Your favorites / starscancelcancelcancelcheck_circle
Your group membershipscancelWithin that groupcheck_circlecheck_circle
person_remove
Deleting your account

You can delete your account at any time from Settings → Account → Danger Zone. Deleting your account permanently removes:

  • cancelYour Firebase Auth credentials and login access
  • cancelAll groups you own, including every file inside them
  • cancelYour membership records in all groups
  • cancelYour display name, avatar color, and profile data
  • cancelYour saved favorites / stars

Files in groups you were a member of (but did not own) are not deleted — only the group owner can delete the group.

storage
Infrastructure and GDPR
VAULT runs on Google Firebase. Data is stored in the EU (europe-west1 / eur3). This means your data is subject to GDPR. If you have a data removal request or a question about your data, open a support ticket and we will handle it.
FAQ
Common questions about VAULT.
Why can't I join a group?expand_more
Your email must be verified to join groups. Go to Settings → Account and click Verify. After clicking the link in the email, sign out and back in. Also make sure the group is not private — private groups require an invite from the owner.
Why is my download blocked?expand_more
You've hit the rate limit. Guest accounts can download 3 files per minute, unverified accounts can download 5 per minute. Wait for the countdown timer to reset, or verify your email to remove the limit entirely.
Can I share files with someone who doesn't have an account?expand_more
Yes. Every file has a share link. Copy it and send it to anyone — they can view the file info page and download it without signing in. Note that rate limits still apply to guests using share links.
I verified my email but it still shows unverifiedexpand_more
You need to sign out and sign back in after verifying. Your browser holds a cached auth token that still has the old unverified state. Signing back in forces a fresh token. If it still shows unverified after that, try clearing your browser cache.
How do I make my group private?expand_more
Go to your group page. Click the Edit button (visible to owners only). Toggle the group to Private. Only people you invite will be able to see the group and its files. Note: existing share links for files in this group will still work for anyone who has them.
What happens to my files if I delete my account?expand_more
All groups you own are deleted, including every file inside them. Your memberships in other groups are also removed, but those groups and their files remain. If you want to preserve a group before deleting, transfer ownership first (currently requires contacting support) or download the files.
Is VAULT free?expand_more
Yes, VAULT is currently free. There are no subscription fees, storage quotas, or paid tiers. This may change in the future if infrastructure costs increase significantly. Any changes will be communicated in advance.
My file upload failed. What went wrong?expand_more
Common reasons: (1) File is too large — 500 MB max for verified users, 100 MB for unverified. (2) You are not a member of the group. (3) Your session expired — try refreshing the page and signing back in. (4) Your internet connection dropped during the upload. Try again with a stable connection.
Can group members see each other's email addresses?expand_more
No. Only display names are visible to other members. Email addresses are never shown to regular users — only to support staff when resolving issues.
I found a bug. How do I report it?expand_more
Open a support ticket at support.html. Select "Bug report" as the category. Describe what happened, what you expected to happen, and what browser/device you were using. Screenshots are very helpful.
Can I request my upload limit to be increased?expand_more
Yes. Open a support ticket, select "Account" as the category, and explain why you need a higher limit and what you are uploading. Staff review requests individually and can raise your personal limit above the default without affecting other users.
Can I request a higher download rate limit?expand_more
Yes, if you have a legitimate reason — for example you are running automated tooling that downloads files in batch. Open a ticket under "Account" and describe your use case. Abusing a higher rate limit will result in it being revoked.
Can I request more than 50 groups?expand_more
Yes. The 50-group limit is a default, not a hard cap. Open a support ticket under "Account" and explain your use case. Staff can raise your personal group limit. Note that very large numbers of groups may affect performance on your settings page.
Can I request a file or group to be deleted that I no longer have access to?expand_more
Yes. Open a support ticket with the group name, approximate upload date, and the email on the old account. Staff will verify ownership before acting on the request.
Can I request my data to be exported or deleted under GDPR?expand_more
Yes. Open a support ticket under "Account" and state whether you want an export or a full deletion. This covers your profile, group memberships, tickets, favorites, login history, and files in groups you own. Staff will process within 30 days as required by GDPR.
Can I report a user or group for prohibited content?expand_more
Yes. Open a support ticket under "Other". Include the group name or share link and describe why the content violates the conduct rules — do not paste links to harmful content directly. Staff investigate within 24 hours for serious violations.
Can I appeal a ban?expand_more
Yes, if your account or IP was banned incorrectly. Open a ticket from a different connection or email and explain the situation. Bans for serious violations such as malware or illegal content are not reversible. Minor or accidental bans may be reviewed case by case.
Can I transfer group ownership to another user?expand_more
Not through the UI yet. Open a support ticket with the group name and the new owner's email. Both the current and new owner need to confirm. Staff will perform the transfer manually.
Someone is impersonating me. What can I do?expand_more
Open a support ticket under "Other" and describe the situation — include the impersonating account's display name and any group links. Staff can rename or ban the account after verifying the report.
How do I write a good support ticket?expand_more
A good ticket has: (1) A clear subject that summarises the issue in one sentence. (2) What you were trying to do. (3) What happened instead. (4) Any error messages, copied exactly. (5) Your browser and OS for technical issues. The more specific you are, the faster we can help.
How quickly do you respond to tickets?expand_more
Most tickets get a first response within 24 hours. High-priority issues — security problems, completely broken features, illegal content reports — are handled faster. If your ticket has been open more than 48 hours with no reply, reply to it yourself to bump it up.
support_agent
Didn't find your answer?
Open a support ticket and describe your issue. We read every ticket.