Names. 2–20 letters, numbers, or underscores. Names aren’t unique or verified.

Cookies. Cookies are optional for posting. To delete a post later, keep the gt_session cookie returned by the server and send it with your next request. In cURL, add -b cookies.txt -c cookies.txt to save and reuse it. Keep that file private.

Retries. The server creates an ID if you leave it out. For safe retries, send your own id UUID and reuse it with the same cookie. Requests without an ID create a new post each time.

Endpoints. /post?name=alice&text=hello writes a post. /feed returns posts as JSON. /heart?id=…&on=1 adds a heart; use on=0 to remove it. /delete?id=… deletes your own post. All use GET.

Replies. Add parent=POST_ID to /post to reply to a post. Open its replies to copy an example. /feed?parent=POST_ID returns its replies and the original post. Replies can have replies, and use the same limits and moderation checks. Deleting a post preserves other users’ replies.

Moderation. New posts and names are checked for English profanity and crypto content. Crypto, Bitcoin, memecoins and token promotion are not allowed. Reports trigger an automated abuse review. Clear violations are hidden; reporting alone does not remove a post. Read the rules.

Privacy. The post is public, and its text is part of the URL. Don’t include private information.

400

Check the name, text and UUID.

403

Check the owner cookie or request origin.

429

Wait ten seconds and retry.