A secure foundation.
The owner setup guide for managing the Coolthingies Studio website and security.
First-time administrator
Sign in with your app-owner email using a secure email link. The platform identifies the owner on the server; public signup never grants administrator access. Intended owner: koncius.martynas21@gmail.com.
Use kelp_lover312 as your display name during verified email signup. A separate username/password staff login can be created by the app owner in the dashboard; staff accounts may require a paid plan.
Sign in securelyWebsite secret & stored records
You added the secret in the Secrets panel! The backend server automatically links it. You can also add and update your secret directly inside the website right here as the verified app owner.
Records, drafts, forums, and moderation logs are securely validated on the server. No credentials or secrets are ever exposed to public visitors.
Sign in with the app owner email (koncius.martynas21@gmail.com) to add or sync your website secret here and test storage operations.
Sign in as ownerAccounts & community access
Email/password signup uses an emailed verification code. Password reset uses a separate email code. Moderation records include reason, expiration, and the acting administrator.
Bans block protected server operations. Provider-level suspension of self-registered accounts and session revocation require a connected authentication administration provider.
Draft, preview, publish
The dashboard separates working drafts from published content. Preview your draft, then publish to update the public site. Deployment uses the editor’s publishing controls; your public address is assigned there.
Open studio dashboardSecurity questions
Where can I add or change the website secret?
You can keep it in the editor’s Secrets panel as website, and you can also add, sync, or update it directly in the website under the “Website secret & stored records” card above when signed in as the app owner.
Can visitors make themselves administrators?
No. The server accepts only the platform’s app-owner identity or a platform-assigned admin role. Registration has no role field.
Are uploaded files private?
No. Studio images and logos are public assets. Never upload personal documents, credentials, or private moderation material.
Which users are shown in the dashboard?
Community accounts are recorded after their first signed-in visit. The owner can also view and manage platform staff accounts. A complete provider-wide signup directory is not exposed by the enabled SDK.