NostrComments
A comment thread on any page on the web — stored on Nostr relays rather than on the site being discussed, so the site owner cannot delete it.
Free and open source. No account, no sign-up, no server.
What it does
Click the button in the corner of any page and a thread opens for that exact URL. Anyone else with the extension sees the same thread. Nothing is asked of the site you are on, and nothing is asked of you either — no account, no email, no password.
Nobody can delete it
Comments are published to several independent relays. The site being discussed has no say in it, and neither does any single relay operator.
Your identity is yours
A cryptographic key you own, held in your browser or in a signer extension you already use. It works on every other Nostr app too.
Nothing in the middle
There is no server behind this. Your browser talks to the relays you choose, directly. There is nothing else to trust, and nothing to breach.
What the relays can see
There is no account, no telemetry, no analytics and no server of ours — nothing sits in the middle of this to collect anything. What does leave your browser goes to the relays you picked, and one thing about that is worth understanding before you install.
To show a thread for a page, the extension has to ask the relays about that page. So they see the addresses of pages you read, your IP address, and your public key if a relay asks you to identify yourself. That is how a comment system attached to URLs works, rather than a choice made on your behalf.
Two things narrow it. It applies only to pages you actually read — a tab you never look at, or a page you leave within a couple of seconds, is never mentioned to anyone. And the relays are yours: drop any you do not trust, or point the extension at one you run yourself.
The privacy policy sets all of it out in full, before you install anything.
You can check all of this
There is no build step. The file you install is the file in the repository — readable JavaScript, not a bundle. You can diff one against the other, and you do not have to take any of the claims above on faith.
- The source, all of it.
- A published security audit — findings, fixes, and the things deliberately left alone, with the reasoning.
- How to report a vulnerability privately.
- A dependency-free test suite that runs the shipped code:
node tests/run.mjs.
Support
NostrComments is free and open source, and every feature stays that way — there is no paid tier and nothing is held back. If it is useful to you, there is a one-line Support the developer row at the bottom of the comment panel — a zap or two, and an arrow that opens the rest — sending sats straight from your wallet to mine over Lightning. No account, no server in between.
You can also zap directly:
- Lightning
slurpnc@coinos.io- Nostr
npub1ewxm82gprxwkh9qznauyey6vwx62xetpsux3prnmddkyevasatgswmds9e- On-chain Bitcoin
198yNVWJz2H8PwmNsX72URVVV9pRbxMb18- Monero
87aDTPD9HQx2QenKsS7MvHDdqsziFPD7UB37X6G5XVXc2ZPhAs8DdEKUPYJijVcRjj1gU5KvxLCTfWUKWqrd1D5o8uw5EpM
The same list lives in the project's README, which is the copy to check against if you ever want a second source for an address.
Reporting a bug that you can reproduce is worth as much, and often more.