Private files

Private files are membership-gated and stored in a per-app private bucket. The SDK supports list, upload, read, and delete. Podda returns opaque IDs rather than public or presigned browser URLs. Files are for member-created app content; build-time assets belong in the staged deployment ZIP.

Uploads use raw bytes with Content-Type, Podda-File-Name, and Idempotency-Key plus optional X-Content-SHA256. Upload and list return the same snake_case fields: id, display_name, media_type, bytes, sha256, uploader_id, and created_at. Internal object keys never appear. Reads are binary; deletes require an idempotency key. Limits are 10 MiB/file, 100 files, and 100 MiB/app.

Last updated 22 August 2026 · Documentation version 7