Designing Sakura's stored data so a database leak does not expose message contents
Sakura encrypts posts on the client and stores encrypted OGP images separately in R2. This article covers what D1 stores, device key delivery, membership checks, and the limits of protecting against a leak of stored data.