How your files are protected

• Everything travels encrypted (HTTPS), and every stored file is encrypted at rest.
• Your files have no public address. Each link is made for you after we check you’re allowed to see it, and it stops working within an hour.
• Final files stay locked until you pay. Before that you see a watermarked preview.
• Cortexed staff can open a ticket’s files, but only to investigate a report of a scam, stolen work or inappropriate content.

Every page, upload and download goes over HTTPS, so nobody between you and us can read or change your files. Files are stored with Cloudflare R2, which encrypts everything it stores (AES-256), so the disks they sit on can’t be read on their own.

This isn’t end-to-end encryption. We can open files when we have to, which is what lets staff check a report and lets you get your files back from any device you log in on.

Chat attachments and final files live in a private store with no public address. When your browser shows or downloads one, we first check who you are and that the file belongs to a ticket you’re part of, then hand out a signed link that:

• works only for that one file,
• expires after an hour for viewing, and after 10 minutes for downloads,
• can’t be changed to reach any other file.

Studio avatars, banners and example pictures are the only public images: they’re meant to be seen on studio pages.

• You: your messages and attachments, and your final files once they’re paid for. Paid files are saved to Your assets.
• The studio: the team members who work on your ticket. Designers see commissions, the support team sees support tickets, and managers and owners see both.
• Cortexed staff: can open a ticket and its files to investigate a report. Only a few admins can act in tickets; other staff can read but can’t post.
• Nobody else: other customers, other studios and people outside Cortexed can’t see your tickets or files.

Studios upload the finished files before asking for payment. Until the purchase is confirmed you see each file’s name and size, plus a watermarked preview of pictures, so you know the work exists and what it looks like. The originals unlock the moment Roblox shows your purchase.

The payment is matched to the Roblox account linked when it was requested, and one purchase can only ever pay for one order.

Previews of final files are watermarked across the whole picture, so they can’t be cropped clean. Anyone sending a picture in chat can add the same watermark with one click. Premium studios can use their own watermark instead of Cortexed’s.

• Files you’ve paid for stay in Your assets until you delete them.
• Deleting a file from Your assets removes it from your library. The studio’s copy in the ticket stays as their record of the delivery.
• Uploads that were never sent are deleted after a day. Files from cancelled, unpaid orders are deleted 30 days after the cancellation.

You log in with Discord, so we never see or store a password. Keep your Discord account secure (two-factor authentication helps), and log out on shared computers from Settings.

Something look wrong, or found a security problem? Email [email protected]. To report a person or studio, use the Report button on their page or in the ticket. More on what we collect is in the Privacy Policy.