Store efficiently
Files are split into content-addressed chunks, described by manifests, compressed before encryption, and written through a storage model that can reuse identical content without making every visible file a physical duplicate.
- SHA-256 chunk identity anchors deduplication and integrity checks.
- Inline compression runs before encrypted storage persistence.
- Filesystem and S3-compatible backends can share the same logical object model.
Upload reliably
Large uploads should not become a special crisis path. Cotton uses chunk-first upload, worker hashing, parallel transfer, and missing-chunk retry so interruption changes the retry set instead of forcing a full restart.
- Chunk count grows with file size; the memory shape stays predictable.
- The server can validate uploaded chunk identity.
- Browser and WebDAV writes land in the same storage pipeline.
Work in the browser
A file cloud should show what is inside the file. Cotton treats previews as product surface for documents, images, audio, video, text, Markdown, HEIC, SVG, and selected 3D model files.
- Mobile PDF can stay in the app with selectable text when the source contains text.
- Audio can show cover art, generated waveform fallback, playback, and synced text tracks.
- Legacy video can use on-demand HLS where Cotton can safely generate it.
Share safely
Sharing is a lifecycle, not only a URL. Cotton can give recipients preview-aware share pages while users and operators keep expiry, single-use options, token cleanup, and notifications in the product flow.
- Share pages are more useful than raw object links.
- Expiring and single-use tokens reduce forever-link drift.
- Native browser share hooks can make mobile sharing feel normal.
Recover normally
Recovery should be a product action. Versions, snapshots, trash, and restore flows are shaped around references so rollback does not have to become a giant copy job.
- Snapshots can preserve layout state by reference.
- File versions let users inspect, download, and restore previous content.
- Cleanup stays tied to the reference graph instead of guessing from loose files.
Operate clearly
Self-hosting should not mean blind trust. Cotton exposes setup, quotas, storage pressure, admin security diagnostics, passkeys, sessions, WebDAV, database integrity signatures, and backup/restore posture as visible product concerns.
- Admin checkup turns deployment posture into actionable signals.
- Passkeys, TOTP, and session revoke reduce account-security guesswork.
- Storage checks and pressure guards surface problems before they become surprises.
Feature proof
The feature set works because it is connected: previews, shares, snapshots, WebDAV, encryption, background jobs, integrity checks, and deployment diagnostics all point back to the same file-cloud model instead of being unrelated plugins around a folder.
When the job is file cloud
Cotton is built deeper for files: large uploads, duplicate data, rich browser previews, safer sharing, ordinary recovery, and clear operations. It is focused by design rather than trying to become every collaboration tool at once.
When breadth matters more
Choose a broader suite when calendars, contacts, office editing, chat, federation, or marketplace apps are the core requirement. Cotton is the better fit when the file cloud itself is the product.