Request-to-join
Every registration is reviewed by an administrator. Access is deliberate, not accidental.
A focused private messenger for people you actually know. Approved members, protected sessions, and private media — without the noise of a public network.
Every registration is reviewed by an administrator. Access is deliberate, not accidental.
Instant delivery, typing indicators, read receipts, edits and replies over authenticated WebSockets.
Record, preview and send voice notes. Private media is served only to conversation participants.
Approvals, suspensions, bans and step-up authentication are recorded in a protected audit trail.
Nebula uses Argon2id password hashing, opaque server-side sessions, signed CSRF tokens, strict authorization checks and private attachment access. Every sensitive action is validated on the server — never trusted from the browser.
Nebula is not end-to-end encrypted. Messages are protected in transit and at rest on the server you control. We would rather be clear than overclaim.
No default admin, no open sign-ups, no public directory.
Your session — not a request parameter — decides who you are.
Attachments and avatars are checked against the requester's access.
Moderation actions are logged and destructive changes require a password.
Create a request, then an administrator will review it. Once approved, you can sign in and start a conversation with people you trust.