[GH-ISSUE #105] Who has access to the firebase cloud storage when using hoppscotch.io cloud storage? #37

New issue

Open

opened 2026-03-16 12:19:28 +03:00 by kerem · 0 comments

kerem commented

2026-03-16 12:19:28 +03:00

Owner

Originally created by @leifhanack on GitHub (Feb 7, 2023).
Original GitHub issue: https://github.com/hoppscotch/docs/issues/105

Hi there,

can you clarify how cloud storage works?

Hoppscotch uses Cloud Storage for Firebase, right?

I searched the documentation and read 1923 and 1817. As well as Cloud Storage for Firebase and Google Cloud Storage

Cloud Storage offers secure-by-design features to protect your data and advanced controls and capabilities to keep your data private and secure against leaks or compromises. Security features include access control policies, data encryption, retention policies, retention policy locks, and signed URLs.

That sound great.

But who has access to that storage and my data?

Is it only me and my team that I created with hoppscotch.io? Or is hoppscotch as the service provider also theoretically able to decrypt and read my data?

Thanks a lot, Best Leif

Originally created by @leifhanack on GitHub (Feb 7, 2023). Original GitHub issue: https://github.com/hoppscotch/docs/issues/105 Hi there, can you clarify how cloud storage works? Hoppscotch uses Cloud Storage for Firebase, right? I searched the documentation and read [1923](https://github.com/hoppscotch/hoppscotch/discussions/1923) and [1817](https://github.com/hoppscotch/hoppscotch/issues/1817). As well as [Cloud Storage for Firebase](https://firebase.google.com/docs/storage) and [Google Cloud Storage](https://cloud.google.com/storage) > Cloud Storage offers [secure-by-design ](https://cloud.google.com/storage/docs/access-control)features to protect your data and advanced controls and capabilities to keep your data private and secure against leaks or compromises. Security features include [access control policies](https://cloud.google.com/storage/docs/access-control), data encryption, retention policies, retention policy locks, and signed URLs. That sound great. But who has access to that storage and my data? Is it only me and my team that I created with hoppscotch.io? Or is hoppscotch as the service provider also theoretically able to decrypt and read my data? Thanks a lot, Best Leif