Public links
Public links share a single view with people who have no account: a live read-only page or an anonymous form, served at an unguessable address you can regenerate or revoke at any moment.
Two modes
| Setting | Options | What it does |
|---|---|---|
| Read | — | A general view rendered read-only. Row clicks into record pages still work; actions, inline editing, and export are stripped. |
| Form | — | A form view that accepts anonymous submissions — intake requests, registrations, feedback. |
Form moderation
Form links can stamp a moderation field on every anonymous submission — for example Status = "Pending review". The field is hidden from the public form and always overridden server-side, so anonymous input can never self-approve.
Safety built in
- Unguessable tokens (~128 bits). Regenerating swaps the address instantly; revoking kills it — both take effect on the very next request, no republish needed.
- Rate limits and quotasper link and per visitor keep a leaked link from becoming a firehose; visitors' addresses are stored only as salted hashes.
- Bot protection on forms: honeypot + minimum fill time, with bots receiving a fake success that writes nothing.
- No anonymous uploads— file and image fields can't be exposed on public forms.
- Revoked, unpublished, and never-existed links all answer with the same "no longer available" page, so nothing leaks.
Public read links follow row clicks into record pages, so a "status board" link can offer drill-down detail — still read-only, still inside exactly the views you shared.