Security and privacy
Where your scenes and assets live, who can read a link, what a device or an agent can do, and how to cut one off.
Your scenes are yours. Nothing is public unless you make a link or turn on your creator page, and both can be turned off again.
Open in Puni to open these settings.
#Where things live
Scene documents and their history live in Puni's database. Uploaded files, covers and shared snapshots live in Puni's storage, addressed by their content hash. Puni stores imported files so your scenes can reopen.
When you ask for a sculpt or named parts, the selected picture or mesh is sent to fal for processing. Pictures made from prompts use OpenAI. These calls use your saved provider keys when present, or Puni's configured keys for credits. Semantic search sends text to Voyage when you choose it.
Provider data handling depends on the provider and account used. Read Provider keys and Credits for costs and availability.
#Signing in
Puni signs you in with an email address and a one-time code, a password, or a connected account offered on the sign-in page. Settings → Security lists every browser session with the device it came from. Sign out on a row ends that session; Everywhere else ends all but this one (it appears when you have more than one other session; the current one reads This device).
#Links
A share link opens one saved version and only that version. It is unlisted: search engines are told not to index it, and there is no list of links anywhere except your own library and your creator page if you turned it on. Revoking a link stops future loads; copies already saved by a viewer stay with them.
#Devices and agents
A terminal or an agent gets a token, never your password. Settings → Devices lists connected machines; Settings → Agents lists connected agents with their scope and when they were last used. Disconnect revokes the token at once, including any session it minted.
A token can read scenes, write scenes, render pictures, make links, or start paid sculpt generation and splitting, and only what you chose when you connected it. See Scopes and tokens.
#Removing things
Archive a scene to take it out of the library; its links stop working while it is archived. Settings → Storage shows how much of your 1 GB you hold, your biggest scenes and your archived ones. An archived scene can be deleted for good there or from its menu in the library. Its checkpoints, its films and its share links go with it; the links were already off while it was archived and are never turned back on. The space is freed at once. Imported files no other scene uses stop counting at once and are erased after 7 days; saving a scene that names one of them in that week keeps it. Deleting cannot be undone. Deleting your account (Settings → Data) cuts off tokens, devices, connections, share links and stored provider keys at once. Puni keeps your scenes and other data for 30 days; signing in again in that window restores them, but not tokens, links or keys. After 30 days it is permanently erased. Export anything you want to keep first.
#Password and profile
Open Settings → Security and choose Set or Change. Enter the current password when asked, then the new password twice (at least eight characters), and choose Save password. An error such as “Use at least eight characters.” shows below the group. Sign out here ends this browser session.
Read Profile and sign-in for names, pictures and email addresses, or Devices for the command line.
Read Troubleshooting if something looks wrong.
Was this useful?