v0.1.4Messages, communities & realtime are live

Your community,
with room to grow.

Splots is a communication platform built end to end in Rust — direct messages, communities with roles and channels, and live presence on hardened sessions. Fast by default, boring by design.

  • Free to use
  • No ads
  • No third-party app JavaScript
splots.tech/app
general

Welcome to #general!

This is the start of the #general channel. Say hi.

Today
A

Ada11:42

finally, a chat with actual channels and no nonsense.

N

Nori11:44

wait, DMs and communities are live already?

K

Kai11:45

yep — and channels, roles, and invites too.

Message #generalpreview

What's inside

Small surface. Serious foundation.

Everything that ships is real and wired end to end — no mock data, no feature flags pretending to be features.

Identity

Live

Lowercase handles, Argon2id password hashing, normalized emails, and strict validation at every boundary.

Sessions

Live

Opaque 256-bit tokens stored only as SHA-256 digests, HttpOnly cookies, CSRF-signed forms, and per-session revocation.

Profiles

Live

Display names, bios, status lines, accent colors, and content-validated avatar uploads with atomic writes.

Security

The defaults
are the safe ones.

No bolt-on auth vendor, no session data in local storage. Every credential, token, and permission check runs inside the same Rust server that renders the page.

Start with a safe account
  • Argon2id by default

    Passwords are salted and hashed with tuned memory cost — never stored or logged in plain text.

  • Opaque sessions

    Only SHA-256 digests reach the database. Cookies are HttpOnly, Secure, and SameSite=Lax.

  • Signed forms

    Every state-changing request carries a session-bound CSRF token and a same-origin check.

  • Bounded input

    Per-action rate limits, strict field validation, and uploads that are inspected before they touch disk.

Roadmap

Built in public.

No fake chat, no placeholder data. Only surfaces that actually work are enabled.

  1. v0.1.0

    Foundation

    Shipped

    Accounts, sessions, profiles, design system, and the server-rendered shell.

  2. v0.1.1

    Messaging

    Shipped

    Direct messages, groups, history, edits, reactions, attachments, and reconnect recovery.

  3. v0.1.2

    Communities

    Shipped

    Servers, channels, categories, invites, roles, and moderation.

  4. v0.1.3

    Realtime hardening

    Shipped

    Presence, typing indicators, bounded queues, and backpressure under load.

  5. v0.1.4

    Operations

    Shipped

    Observability, rate-limit tuning, and production deployment profiles.

Come say hi.

Claim a handle, start a community, and invite your people.