Choosing Storage for Browser Receipt Uploads: Retention, CORS, and Deletion Trade-offs
The article argues that Cloudflare R2 is the strongest fit among R2, S3, and Wasabi for browser-uploaded receipts with meaningful download traffic, citing low storage cost, free egress, and CORS support via presigned URLs. Amazon S3 is presented as better for global coverage and fine-grained controls, while Wasabi is flagged as risky where frequent native egress is needed. It stresses that cheap uploads are not a retention policy, so applications still need deletion schedules, audit records, and clear ownership of removals. The recommended pattern has the backend authenticate users and issue short-lived presigned upload URLs, with metadata stored in the application database rather than the storage provider. Finally, it notes that CORS must be verified at the bucket layer and proposes a five-case test to compare providers before committing.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)
Log in to join the discussion and vote.
Log in