Why moderation is part of the gift
The recipient did not sign up to be a moderator. Anything that reaches them, we allowed through — so the bar has to be high.
Every message in Celebrari passes moderation before it lands. Slurs, threats and personal information are blocked at submit. Rate limits run per device and per network. The person who created the sky can hide anything they do not want in it, at any time.
This is not a policy department. It is a design decision, and it starts with a question we ask constantly: who is going to open this?
The recipient did not sign up to be a moderator
A sky is usually opened by one person, on a day that matters, often alone, sometimes on one of the harder days of their life. They did not ask to police a comment section. They should not have to.
Which gives us a clear standard: anything that reaches them, we allowed through. That is the bar, and it is a high one, because the alternative is that our inattention becomes their afternoon.
Why we block personal information
This one surprises people, so it is worth explaining. A group card is a list of contact details waiting to happen. Someone signs a message with their phone number or their address, and now it sits in a collection that two hundred and fifty people can read, permanently.
Blocking it costs us a little warmth in the moment and saves someone a real problem later. That is an easy trade, and we would make it again.
A blocked message explains itself
When something is refused, the person writing it gets a sentence telling them what to change and the chance to send it again. Not a silent failure, not a red box with a code in it, and not a message that disappears into nothing.
That is partly kindness and partly practicality. A guest who cannot tell why their message did not send will try three more times, get frustrated, and give up on the gift entirely. A guest who is told to remove a phone number will remove the phone number.
Rate limits are a kindness, not just security
A live event is a burst: hundreds of people, one wifi network, one hour, everyone arriving at once. Without limits, a single script or a single bad actor can fill a sky — and a broken sky on the night is the failure that matters most, because it happens in front of everyone.
The limits are set so a full room of real guests never notices them and a script does. That is why the counting happens outside the database, where it is fast enough to stay invisible.
The creator gets the final say
We can catch slurs and card numbers. We cannot catch "that is not funny", "that is not how it happened", or "she should not read this today".
Only the person who knows the recipient can make that call, so they can hide anything, and the sky updates without an argument or an explanation owed to anyone.
Anyone can flag a public star
The Common Sky is open to strangers, so it carries a second layer: a report path that anyone can use, with its own limits so it cannot be turned into a weapon against a message someone simply disliked.
Reports go to a human. There is no automatic deletion, because a system that removes anything after three complaints is a system that can be gamed by three people.
Safety is not a page on this site
It is the reason the gift works. A keepsake someone is afraid to open is not a keepsake.