Every file your project needs, right where you build.
Your project has files. Logos, hero images, PDFs, the avatar a user just uploaded, the document your app is about to save. Until now, those files lived in a few different places. Some inside your generated code. Some in a Supabase dashboard you had to open in another tab. Some you never really saw.
File Storage puts all of it in one place.
Open the Files tab in Studio, next to Preview, Edit, Code, Data, Security, and Settings. That’s where your project’s assets live now. The ones you upload as the builder, and the ones your app creates for your users.
Two kinds of storage, in one view
Files splits into two clear layers, and the distinction is the whole point.
Your folders hold the assets you own as the builder. Brand assets. Product images. Marketing PDFs. You create folders, drag files in, nest folders inside folders, rename, download, copy public URLs, delete. Everything you’d expect from a proper asset manager, sitting inside the same tab where you build the site.
App storage is for what your running application creates. If you build a profile app with avatar uploads, Sticklight creates a Supabase storage bucket for it. That bucket shows up in Files with an App storage badge. You can browse it, preview files, download, and clear it out between test runs. What you can’t do is upload into it from the dashboard, and that’s on purpose. App storage belongs to your app’s upload logic, so bypassing it from the outside would break the security model your app is running on.
The result: you can see everything your project touches without losing the guardrails.
Public or private, on your terms
When you create a folder, you choose its visibility.
Private is the default for anything sensitive. Files are only accessible to authenticated users with the right permissions, and each user sees only their own. There’s no public URL to leak.
Public is for assets you want the open web to reach. Logos, hero images, marketing PDFs. Copy the URL, drop it into your app, done. Subfolders inherit the parent folder’s visibility, so a private root stays private all the way down.
Every folder has a Permissions panel that shows the Supabase RLS policies governing access. Policy name, command, roles, rule expression. You review the security on the folder itself, not by opening a Supabase dashboard in a separate tab and hoping the policy attached to the right bucket.
The AI handles the plumbing
You don’t need to be a backend engineer to use any of this. Ask the AI to enable Cloud Backend and it provisions Supabase behind the scenes. Ask it to add file uploads to your app and it creates the bucket, wires up the upload code, and writes the security policies. When you build a feature that needs saved data, Cloud Backend comes with it, storage included.
Then everything appears in the Files tab. Your folders, the app buckets the AI created, and a storage meter that shows how much of your plan you’ve used.
Storage that scales with your project
Only your builder folders count toward your plan limit. App storage, the uploads your users generate, sits outside that quota, so a viral app doesn’t accidentally throttle your project.
Plan limits per project: 50 MB on Free, 500 GB on Pro. Files up to 50 MB each, up to 10 at a time in a single upload.
If you hit your limit, new uploads pause until you free space or upgrade. The meter is visible from the moment you open Files, so you see it coming.
Start with one folder
Open the Files tab. If Cloud Backend isn’t set up yet, one tap sends the request to the AI and you’re ready in a minute. Create a folder. Drag in the assets your project needs. Build the next feature knowing the files are already in place, with the right permissions, in the same tab where you work.
The infrastructure is handled. What you build with it is up to you. Let it glow.
FAQ
Do I need a Supabase account to use File Storage?
No. Cloud Backend is Sticklight’s integrated Supabase backend, and it gets provisioned when your project needs it. There’s no second dashboard to manage.
What counts toward my storage limit?
Only files in your builder folders. App storage, the uploads generated by your users through your running app, doesn’t count against your quota.
Why can’t I upload into app storage from the dashboard?
App storage belongs to your app’s upload logic, where the security rules live. Uploads happen through the app so those rules stay intact. From the dashboard you can browse, download, and clear files, which covers visibility and cleanup without breaking the model.
How do I know a private folder is actually private?
Open the Permissions panel on the folder. It shows the RLS policies that govern access, so you can review the rules yourself instead of taking it on trust.
What are the storage limits per plan?
Free projects get 50 MB. Pro projects get 500 GB. Individual files are capped at 50 MB, with up to 10 files per upload.
Where does File Storage fit into Security?
The Security tab scans for issues like private buckets accidentally set to public, or upload paths that don’t match the security rules. The Permissions panel in Files lets you spot the same things earlier, on the folder you’re working in.
