Sources

Primary documents only. Repo paths are on release/1.0.0 at github.com/ad3lre/echo unless noted. Retrieved 20 September 2026.

Live Echo properties

• chat-echo.com: hosted app. Last-Modified header 16 August 2026. Cloudflare. SPA fallback copy: “Still loading.”
• app-echo.net: marketing. Hero, FAQ, “No ID verification, ever.”
• app-echo.net/privacy: Privacy Policy, 23 May 2026. Plaintext chat, IP / device IDs, Google OAuth, Kleingewerbe.
• app-echo.net/download: Windows / macOS / Linux “Stable” buttons.
• app-echo.net/poll: Adel Approval Poll.
• alternatives-discord.com: ranking site announced in the Stoat EDAR.

Repo files

• README.md: product pitch, AGPL, GitHub contributions, Apple clients.
• AGENTS.md: GitLab origin/main vs GitHub release/1.0.0 only.
• docs/operations/github-release-mirror.md: 23:00 Europe/Berlin mirror, rewritten public history.
• docs/DEVELOPMENT.md: “public development and issues/PRs use GitHub only.”
• CONTRIBUTING.md: gitleaks, first GitHub push without history.
• .github/SECURITY.md: no SLA; public repo has no private history; rotate old secrets.
• marketing/src/site.ts: CHAT_APP_ORIGIN = https://chat-echo.com, MARKETING_SITE_ORIGIN = https://app-echo.net.
• marketing/src/i18n/en.json: homepage strings, no-ID card, FAQ.
• marketing/src/pages/download.astro: every desktop download href is the web origin.
• marketing/src/pages/poll.astro: poll endpoint on chat-echo.com.
• marketing/src/lib/adelApprovalPoll/questions.ts: 50 scored questions, including the founder-untrustworthy item.
• marketing/terms/en-US/privacy.md: source of the live privacy page.
• marketing/terms/en-US/terms.md: age verification, content license, no refunds, Germany.
• marketing/terms/en-US/community-guidelines.md: no self-promotion, no alts, no unauthorized bots.
• docs/security/e2ee-threat-model.md: text chat not E2EE.
• docs/security/vulnerability-ranking.md: 103 findings, closed 31 May 2026.
• docs/reviews/security/patched-security-issues.md: High XSS and High IDOR, 31 May 2026.
• docs/reviews/STATUS_AND_PRODUCTION_READINESS.md: Horizon A / B percentages, voice ~37%.
• docs/echo-code-charter.md: ~476k LOC, ~2,540 source files.
• clients/apple/README.md: iOS first shipping target.
• CODEOWNERS: paths, no handles.

GitHub API (20 September 2026)

• api.github.com/users/ad3lre: name Adel, created 2022-03-10, 0 followers.
• api.github.com/repos/ad3lre/echo: created 2026-05-14, 45 stars, 3 forks, default branch release/1.0.0, 11 open items.
• contributors: ad3lre only.
• Issues list: Dependabot pull requests. No human-filed issues in the first 100 items.
• Releases list: empty.

Reddit, u/ad3lyt and related threads

• A warning about the “Echo” application: 30 May 2026. Adel replies in-thread.
• Addressing Recent Allegations Regarding: Echo: 31 May 2026, u/ad3lyt.
• Is Echo a secure discord alternative that can be trusted?: 3 June 2026, u/ad3lyt. API-key admission.
• Osmium is botting / manufacturing their own posts: 28 May 2026, u/ad3lyt.
• Echo EDAR Review: 3.3 out of 9
• Element EDAR Review 6 out of 9
• Stoat EDAR Review 6 out of 9
• Fenrid Review: 3/10, conflict line, “Heavy” slop.
• r/SaaS: “Created a Discord alternative in response to Discord's ID Mandate”: five dedicated users, Discord bot origin.
• “Has anyone tried out Echo?”: empty body, score 0.
• Comment archive via PullPush for the warning thread and the 3 June post (u/KiraiPlayZ, u/Excellent_Dream9591, u/vikeyev, u/kiseiwa, u/ad3lyt).

What this site does not use

No private messages. No exploit payloads. No old YouTube archaeology. Unproven CSRF / “touch the database” claims are labelled as claims. The High XSS and High IDOR entries are quoted from Echo’s own patch log.