Upload policies

Decide which files users can upload to which websites: block them, warn first, or record them.

• When it applies: as a user uploads a file, by choosing it in a file picker, dropping it onto the page or pasting it, before the website can read it. Needs extension 0.6.0.
• Websites: the website the user is on. Use the built-in lists, such as file sharing, webmail or AI assistants, or enter your own.
• File types (optional): with none, the policy covers every file. Several files at once are decided together, and the strictest result applies to them all.
• Block: the website never gets the file, and the user sees your message, naming the file and the website.
• Warn: the website gets the file and the user sees your message. With Require acknowledgement, the file is kept back: Don't upload ends it, and continuing lets the user choose or drop the file again to upload it.
• Audit: the upload goes ahead and is recorded in the audit log, with the website it was sent to when the browser can see it.
• Common rules to start from: Add policy offers block uploads to personal file sharing, block uploads to personal webmail, warn before uploading to AI assistants, block uploading keys and password databases, and record uploads to a website. Pick one, fill in what's left blank, and save. Or choose a custom policy.
• Record every upload in Privacy records uploads no policy stops.