Private by default
New spaces should default to private unless the owner explicitly chooses public.

Moderation, permissions, reporting, privacy, and clear controls keep communities respectful and secure.

New spaces should default to private unless the owner explicitly chooses public.
Roles and room/category rules should be enforced server-side, not only hidden in the client.
Reporting and moderation workflows help owners respond to issues quickly.
Public endpoints must not expose private spaces, private rooms, message contents, invite data, or owner IDs.
Future parental and age-gating systems must be clear and privacy-conscious.
Admin and staff tools should stay locked to trusted operators and audited actions.