Nonograph

Anonymous publishing for the privacy-conscious web.

Nonograph is a simple anonymous publishing platform for anyone who wants their words to exist online without being tied to an identity. You write, you get a shareable link, and that's it. No account creation, no profile, no analytics trail following readers around.

https://github.com/user-attachments/assets/d662c9a2-f0ed-4266-bf55-e2c1f024269e

Known Instances

These instances are provided by third-parties, each with their own policies. Choose one that reflects your values, or self-host.

Deploy

mkdir -p ~/nonograph/content ~/nonograph/onion
sudo docker run -d \
  --name nonograph \
  -p 8009:8009 \
  -v ~/nonograph/content:/app/content \
  -v ~/nonograph/onion:/var/lib/tor/hidden_service \
  --restart unless-stopped \
  ghcr.io/du82/nonograph:latest

or grab the source code and make your own container:

git clone https://github.com/du82/nonograph
cd nonograph
make up

Then check logs for your .onion address:

docker logs nonograph

Hate Docker? Run ./run to build and run natively (Debian only).

Features

Nonograph comes with an extensive list of markup options; type / on a new line to display a list of them.

Screenshots

The homepage and writing area:

The editor with a page in progress:

A published page with an image:

Codebase mirrored to...

• Radicle: rad:z2irFqQ3Zx1S8kqsVgH9itBoVUxkT
• Forgejo: git.anarchists.space
• Archive: Software Heritage Archive

Name and origins

anonymous + monograph + telegraph = nonograph

Nonograph is an open-source alternative to Telegraph (telegra.ph) with a focus on privacy and anonymity. Here is a decent history of the project that someone made in attempt to dox me.

"Nonograph" is pronounced like "non" + "oh" + "graph". Non, as in "aNONymous"

Audits and security

• 10/13/2026 - @du82 added $13,200 USD worth of Monero to the bug bounty program.
• 9/5/2026 - @netqo contributed security improvements. Paid in Monero in this pull request.

• 8/21/2026 - @sgpinkus contributed security improvements. Paid in Monero in this pull request.
• 6/22/2026 - @SmokeCamel was reimbursed and provided isolated VMs for running top AI models against Nonograph's parser. No vulnerabilities were found.
• 4/20/2026 - @h_2_o0 found a URL validation bypass on 4/20 (nice), fixed in this commit.
• 10/15/2025 - Security Assessment Report Redacted.pdf - audit of the initial release (v0.0.1), paid for in Monero. Only the auditors name and email were redacted. Fixed in this and this commit.

License

Public domain (Unlicense). This software belongs to everyone. Use it, modify it, share it without restriction. Do what you want with it, but remember there's no warranty. Please respect the policies of hosted Nonograph servers you come across.