Now in alpha · consent enforced, CSAM screening in development

Nothing is published until it's screened.

Cinderella is a firewall in front of the public archive: nothing a member posts is ever published unless that member opted in, and every decision is written to the audit log. Automated CSAM screening is built into the pipeline and is in development; no detection provider is connected yet.

CSAM screening (in development)Consent-firstPasskeysLocal AIAGPL-3.0
Cinderella consent verified CSAM screening in development
The archive, live

Search a permanent, public record

Full-text search, filters, and media behind authentication. This interactive preview runs entirely in your browser with sample data: type a query, switch groups, and watch the archive respond exactly like the real thing.

archive.cinderella.example / all groups PREVIEW · SAMPLE DATA
10 messages
mara#privacy-talk14:02 archived
New onion-routing writeup is up, covers guard selection end to end.
devnull#privacy-talk14:03 archived
Does it touch on padding overhead? That's where most guides hand-wave.
kai#selfhosting09:11 archived
Here's my docker-compose.yml for the archive bot behind Caddy.
attachment
lena#selfhosting09:14 archived
meetup_recording.mp4
video · behind auth
tomasz#foss-de21:40 archived
AGPL vs GPL for a bot serving a public archive, 14 replies deep now.
mara#privacy-talk14:20 archived
Passkey rollout checklist v2 attached: WebAuthn only, no fallback.
attachment
ingrid#foss-de21:52 archived
Onion services plus this archive = searchable history without a central host.
kai#selfhosting10:02 archived
grafana-dashboard.png: capture throughput over 24h.
image · behind auth
devnull#privacy-talk15:31 archived
Consent prompt fired before capture, logged with the group id. Clean.
tomasz#foss-de22:05 archived
Full-text search across a year of threads in under 40 ms.
No archived messages match
How it works

Screened before it's seen

Everything flows through Cinderella first: consent, then content screening, then the public archive. Each stage can stop a message, and nothing skips the queue.

CSAM screening (in development)

The pipeline is built to hash every image and video at receipt and compare it against databases of known abuse material, holding any match for the authorities rather than deleting it. The screening stage is in development and no detection provider is connected yet, so no such check runs today. Hash matching finds known material only; it cannot detect new material.

Consent-first

Nothing passes through without the group's explicit opt-in. Consent is checked before capture, never assumed, and can be withdrawn at any time.

Secure by design

Passwordless passkeys, encrypted transport, media behind authentication, full audit logging. Security is the foundation, not an add-on.

Then archived

Only what clears screening becomes a permanent, searchable public record. Everything else simply never appears.

The suite

The archive is the first capability

Cinderella is a growing suite of SimpleX and Matrix bots built around one identity. The public archive is live today, and more capabilities are on the roadmap.

Public web archiveLive

Consent-gated capture, full-text search, filters, infinite scroll, video playback, and SEO-friendly public pages. Built to make a community's shared knowledge findable for years, not buried in chat history.

See all capabilities
On the roadmap
Matrix supportPlanned
CategorizationPlanned
Video & image galleryPlanned
Moderation toolingPlanned
Local AIPlanned
Multi-tenancyPlanned
Security & safety

Your data stays yours

Passwordless passkeys, encrypted transport, and AI that runs locally on your hardware. Nothing leaves your infrastructure, and no third-party cloud ever sees your community's conversations.

Passwordless passkeys (WebAuthn)
Encrypted in transit, hardened hosts
Local AI, no third-party clouds
Content reporting & moderation