Your group. Your rules. Your server.

Moderation for Telegram groups, on a record nobody can quietly edit.

Join the pilot See what works today

Opens WardForth in Telegram. No form, no email.

Runs in Stockholm. Secrets and error reports stay in the EU.

City Cycling1,204 members

LeaRide Sunday at 9? Meeting at the bridge.13:58

OmarIn. Bringing spare tubes.13:58

quick_profit_77Earn 400 a day from home, DM me now13:59

/ban spam13:59

WardForthBanned quick_profit_77. Reason: spam. It's in the audit log.13:59
Available today

Illustration. Group, names, times and numbers are invented.

Keep the record. Drop the rest.

Telegram keeps your admin history for 48 hours, by its own 2017 post. Some bots keep your members' data for years.

WardForth keeps a record of what moderators do, and erases stored message text after 90 days.

See the comparison

Shields

The tools a moderator reaches for, today.

Available today

Ban, mute and restrict from a reply, a user ID or a mention, with coded reasons. Tests: TG-02, TG-07, TG-17
Ban across your groups in one go. The other groups see that it came from elsewhere, never from where. Tests: SV-13
Lose the bot's admin rights and the owner hears about it in private, at once. Tests: RW-01, RW-02

Each feature here names the tests behind it. The build checks that those tests exist.

Coming

Next: shields that run in the shadows before they touch anyone. Try it in the shadows first. See who it would have stopped.

Every new rule runs in shadow mode first and shows what it would have done.
New members prove they are human before they can post.
A wave of joins closes the gate. It reopens by itself.
Flood, link and word filters that judge in memory and store only the outcome.
Warning points with a ladder, and points that expire.

Not available yet. A feature moves up when it ships and its tests exist.

Group DNA Coming

Advice from your own group, not from everyone else's.

Coming

Recommendations built from your own group, with the numbers that justify them.
A Monday note on what happened and what the shields stopped.

Not available yet. A feature moves up when it ships and its tests exist.

Privacy is built in, not promised.

The database enforces it. Every feature under Available today has a test behind it, and a feature without one never gets there.

Available today

Every change is in a hash-chained audit log. Remove or alter one entry and the chain says so. Tests: AUD-01, AUD-02
A moderator sees their own groups and nothing else. Enforced by the database, not by a promise. Tests: ISO-01, ISO-02, ISO-03, ISO-04
Stored message text is erased after 90 days, and its key is destroyed with it. Tests: RET-08, RET-09, KEY-01

Each feature here names the tests behind it. The build checks that those tests exist.

Runs in Stockholm, at UpCloud.

Where WardForth runs and where it keeps what it keeps. Each line names the decision behind it, and the build checks that the decision says so.

The server and the database run at UpCloud in Stockholm, in one zone. The database is reached over the private network only. Decision: E2
Secrets live in Bitwarden's EU cloud and are fetched into memory. Decision: B5
Error reports go to GlitchTip's EU instance in Frankfurt, which is not replicated to the US. Decision: E3
This site loads nothing from anyone else. No cookies, no analytics. Tests: SITE-02, SITE-25

Serious violations of Telegram's terms

A moderator can mark a ban as a serious violation of Telegram's terms. This is what happens then.

Available today

A serious violation of Telegram's terms leaves one line. No text, no media, in any setting. Tests: SV-01, SV-05, SV-09, SV-10, SV-11, SV-12
Those bans are never lifted by a rule. Only a person can. Tests: SV-04

Each feature here names the tests behind it. The build checks that those tests exist.

WardForth vs. the bots you already know

Only what we could back with a source. Where we found nothing, we left it out.

The moderation record

WardForth

Every change is in a hash-chained audit log. Remove or alter one entry and the chain says so.

Tests: AUD-01, AUD-02

Others

Telegram's Recent Actions

Telegram's 2017 post describes admin actions and deleted messages from the last 48 hours, for admins only.

Source: telegram.org/blog/admin-revolution (published 2017-06-30), read 2026-09-30
ChatKeeper

The free tier keeps the last 1000 entries of its activity log.

Source: chatkeeper.app/prices, read 2026-09-30

Who sees which group

WardForth

A moderator sees their own groups and nothing else. Enforced by the database, not by a promise.

Tests: ISO-01, ISO-02, ISO-03, ISO-04

Others

Combot

Until 17 May 2026 an admin had full access or none. The cross-group permission matrix needs three or more groups where you have promote rights.

Source: t.me/s/combotnews, read 2026-09-30

Bans across groups

WardForth

Ban across your groups in one go. The other groups see that it came from elsewhere, never from where.

Tests: SV-13

Others

Rose

Federations share bans across groups.

Source: missrose.org/docs/federations, read 2026-09-30

How long data stays

WardForth

Stored message text is erased after 90 days, and its key is destroyed with it.

Tests: RET-08, RET-09, KEY-01

Others

Combot

Public group text is kept up to 2 days for language detection.

Source: combot.org/privacy_policy, read 2026-09-30
ChatKeeper

The terms allow keeping personal information at least three years after a subscription ends.

Source: chatkeeper.app/terms-of-use-2, read 2026-09-30
GroupHelp

Most user data is kept until the account is deleted, plus up to 20 years.

Source: grouphelp.me/privacy, read 2026-09-30

Bots change. Each line says where and when we read it.

Try it in your group.

The pilot is free. Start in Telegram.

Open WardForth in Telegram

A link to the bot. Nothing is collected here.

Questions about the pilot? Write to support@wardforth.com

Coming

When the panel opens, sign-up stays closed at first.

A panel for every case, shield and recommendation, on your own server.

Not available yet. A feature moves up when it ships and its tests exist.