FrogTalk is one app for encrypted DMs, voice & video calls, social posts, Reels, stories, Frog Channel imageboard threads, shared music, and live Discord/Telegram bridges — federated across independent Lilypads (nodes). No ads, no tracking. Pre-alpha: expect rough edges; we cannot guarantee uptime or data safety yet.
Check out Frog Social — post updates, watch Reels, share stories, and see what friends are up to 🌐
🐸 4🔥 2❤️ 7
🌿
MossyLog
🎬 Now playing · Tame Impala — Let It Happen(synced)
DC
blaze Discord
reactions & media sync both ways 🔁
TG
mira Telegram
voice notes and stickers too 🎙️
⚡
VaultFrog
🔒 end-to-end encrypted · Signal Protocol
📷
📎
🎙️
😀
GIF
↑
This Lilypad
FrogTalk Main · frogtalk.app
Official pre-alpha public hub — federated chat, calls, social, and Frog Channel. Self-host your own Lilypad (node) anytime; this instance is what most people use first.
Pre-alpha builds for testing — native Android, desktop, or browser. Not recommended for sensitive or production use.
One app. No landlord.
Everything you'd reach for — chat, calls, communities, a board, music — on servers that belong to whoever runs them. Not a company. Not us.
🪷 What makes it different
You can run the whole thing
FrogTalk federates across independent Lilypads — nodes anyone can host. No central server, no owner who can read your messages, sell your data, or switch you off. Spin up your own pond in one command.
docker compose up -d🔒
Signal-grade E2E, by default
X3DH + Double Ratchet DMs and per-room AES-256-GCM with key rotation. The server only ever holds ciphertext — never a premium toggle.
📞
Calls that cross servers
Ring a friend on another Lilypad and it just works. Share screen and camera at once, pop the video out, set each person's volume.
🧅
Clearnet or Tor
Reach any node over a v3 .onion — calls, boards and federation included. No ads, no trackers, no analytics SDKs.
Keep every FrogTalk Lilypad (node) in sync with official release metadata, build hashes, Tor routing preferences, and trust checks.
Ship Once From frogtalk.app, Propagate Everywhere
Main site publishes a release feed with package SHA-256 and build hash. Lilypads poll the feed, verify legitimacy, prefer onion routes when available, and apply updates safely without leaking onion-only peers.
Publish latest version, package URL, SHA-256, and expected build hash from your main domain.
Trust Badges In Network UI
Operators instantly see connected state, official directory status, onion capability, hash match, and legitimacy badges.
Safe Apply Flow
Each Lilypad downloads the update package, verifies checksum, syncs files, and restarts service without drift.
Tor-Enabled Server Handoffs
The app switches users to the Lilypad's app at /app, preserves handoff tickets when possible, and keeps onion links pointed at the real chat surface instead of the marketing home page.
No central server. No owner.
“Federated” isn’t the same as decentralized. On some networks marketed as decentralized, your identity and metadata still flow to one company’s servers — even when you self-host. FrogTalk has no such server.
Centralized “federation”
A flagship homeserver holds most accounts — a de-facto centre
An identity service maps you to email / phone / contacts, stored centrally
Metadata — who you talk to, when, from where — reaches central servers, even from self-hosted instances
By default, server admins can read your media, avatars and files
“Decentralized” in the pitch; phone-home in the code
FrogTalk
No central server to own you. Every Lilypad (node) is independent — your data lives only on the node you pick or run
No identity broker. No email, no phone — a nickname is the whole account
Metadata stays on your node. The directory carries only what an operator chooses to list — never your contacts or IP
Client-side encryption. DMs (Signal Protocol) + private channels (AES-GCM); your node stores ciphertext only
No phone-home. Self-host and nothing reports back to us — federation is opt-in, operator-to-operator
📇
Our main site is a listing, not a landlord. frogtalk.app publishes the public node & channel directory and release metadata — a phone book, nothing more. It can’t read your messages, doesn’t hold your account, and can’t switch you off. Delist from it and your Lilypad keeps running.
Built for Privacy, Not Profit
Most chat apps monetize your conversations. FrogTalk is different — your messages are encrypted before they ever leave your device.
✓ Signal Protocol DMs — X3DH + Double Ratchet, forward secrecy per message
✓ Per-channel AES-256-GCM for private rooms with automatic key rotation on ban/kick — server only sees ciphertext
✓ Verifiable Safety Numbers in the in-app 🔒 panel
✓ WebRTC P2P calls — media never touches our server
✓ Optional 18+ labels on public channels — moderator-set, session age gate (not automated scanning)
✓ No analytics, no third-party SDKs
✓ Self-hosted — run your own instance
✓ SQLite — single file backup, you own your data
// Your DM encryption (client-side, Signal Protocol)const session = await Signal.startSession(theirBundle);
// X3DH agreement → Double Ratchet sessionconst envelope = await Signal.encryptDM(
peerUserId, plaintext
);
// Every message advances the ratchet ↳ forward secrecy// Server receives only ciphertext 🔒await fetch('/api/dms/send', {
method: 'POST',
body: JSON.stringify({ to: peerUserId, envelope })
});
100% Open Source
Audit the cryptography, run your own Lilypad (node), build a bot, or hack on the client. Every line of FrogTalk is on GitHub.
Built In The Open Owned By Everyone
FrogTalk is licensed for self-hosting and inspection. The full server, federation layer, web client, Android app, desktop app, and the Tor / onion routing logic all live in one repository — no closed components, no dark services. Verify the build hash on your Lilypad against the one published from frogtalk.app before federating.