From fd8e730810ec0b213cc2bd019ae90226c0c6232a Mon Sep 17 00:00:00 2001
From: 24c02 <163450896+24c02@users.noreply.github.com>
Date: Fri, 6 Mar 2026 14:34:40 -0500
Subject: [PATCH] uuidv7 note

---
 app/views/docs/pages/using-cdn-urls.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/app/views/docs/pages/using-cdn-urls.md b/app/views/docs/pages/using-cdn-urls.md
index 3d1ac5d..a504a96 100644
--- a/app/views/docs/pages/using-cdn-urls.md
+++ b/app/views/docs/pages/using-cdn-urls.md
@@ -34,6 +34,10 @@ Requests are 301 redirected to the underlying storage bucket.
 ![](https://cdn.hackclub.com/019505e2-e7f3-7d40-a156-9c4e8b2d1f03/screenshot.png)
 ```
 
+## Security
+
+Upload IDs contain 74 bits of cryptographic randomness (UUID v7, via the OS CSPRNG). There's no file listing or directory index. URLs are safe to use for unreleased programs.
+
 ## Hotlinking
 
 Supported. URLs can be embedded in GitHub, Notion, Discord, Slack, etc.