Changelog
Built in public, shipped in plain English
April 14, 2026
Security hardening + brand refresh
- Server-side session cookie replaces localStorage account-type (security fix).
- Auth route rate-limiting + Cloudflare Turnstile on signup.
- Owl mascot now stars on the marketing site. Eyes track your cursor — try it.
- Wise-Owl-at-Twilight palette across marketing pages.
April 12, 2026
Permissions, audit log, and idle timeout
- Per-action permission gates with grayed-out fallback for read-only roles.
- Audit log viewer with CSV/JSON export (admin only).
- 29-min idle timeout with 1-min countdown banner before forced logout.
March 30, 2026
Archive + retention rules
- Documents can now be archived and bulk-restored.
- Per-folder retention policies (toggle on/off, editable days).
- Storage gauge on the archive page tracks your quota in real time.