Sources
Marketing pages, videos, and the Reddit posts were fetched 25 October 2026 unless a row says otherwise. The database repository was read on 28 October 2026 from the single public commit of that day. The app's marketing pages are a client-rendered Next.js site. Homepage and Plus quotes were taken from the rendered text on 25 October. Terms, privacy policy, announcement, roadmap, guidelines, and developer docs were taken from the pages themselves. YouTube quotes are from YouTube's auto-generated English transcripts, so a word can be off. Reddit post text was read through the Arctic Shift archive, because a direct fetch of reddit.com from this network was blocked. Comment text under the YouTube videos is from the comment excerpts returned with those video pages.
The app's own pages
- yapper.website homepage. Title, meta description, hero, and Questions section. Also served at yapin.gg.
- Plus. Price, perk list, free-versus-Plus table, "no investors."
- Yapper is now Yapin'. Dated 23 October 2026 on the page. Rename, "free again," 800 bug reports, Plus launch window.
- Terms of Service. "Last updated 25 October 2026." Sections 2, 5, 9, 10, 12.6, 13, 14, 18, 19, 21, 22, and 24 are the ones cited.
- Privacy Policy. "Last updated 25 October 2026."
- Community Guidelines.
- Developer docs. "Discord's shape," Discohook, bot hosting sizes, image hosts.
- Roadmap. "Last updated 18 October 2026."
Videos
- Discord sucks... So I made my own. Antic, 11 October 2026. Name criterion, link in the description, [email protected].
- Discord still sucks... So i made my own. Antic, 17 October 2026. "Entirely free," 50,000 users, Ko-fi link. Comment from @BubhahaCoolio and reply from @milktheteal.
- I Made a Better Discord and It Blew up.... Antic, 24 October 2026. 87,000 members, nearly 25,000 servers, the LLC line. Comments from @Carwynplayzgamez, @CC-ep2bq, @therealtmr, @2763CakeAtStake.
- Channel: Antic.
- Seeing Yapper/Yapin' being hyped up like that is kinda scary. u/ja_n2000, 25 October 2026, 18:34 UTC. Archive copy via Arctic Shift, post id 1xfa02q.
- Yapper.website is horrible (atleast for me). u/kUSHIXRUSHI, 23 October 2026, 14:59 UTC. Archive copy via Arctic Shift, post id 1xdgf71.
Domain, company address, trademark
- Scamadviser, yapper.website. WHOIS registration date 2026-10-11, registrar data hidden, hosted at Vercel. Trust-score prose on that site is an automated new-domain rating and is not used here as evidence of a scam.
- Registered-agent suite: public company records list 131 Continental Drive, Suite 305, Newark, DE 19713 as a formation address, including filings shown care of Legalinc Corporate Services Inc. Example: ENCRATA CORPORATION, LEI record, legal address "c/o LEGALINC CORPORATE SERVICES INC., 131 CONTINENTAL DRIVE SUITE 305." Many unrelated entities use the same suite. The Yapper Media LLC terms print that suite as the company's US address.
- YAPPER, US serial 99426164. Yapper World Inc., filed 2 October 2025, class 009, "Recorded software for use in social networking." Status reported there as of 24 August 2026: live, suspension check, case still suspended. Correspondence address on that record is 131 Continental Dr, Suite 305, Newark, DE. Cited only as a pre-existing application for the word, not as proof of who sent Yapin' a complaint.
Code
- GitHub repository search, 25 October 2026, query
yapin.gg OR yapper.website OR "Yapper Media". Results that day were third-party bots, scripts, and unofficial wrappers. No official client or server repository appeared in that search. Individual third-party repos are not reviewed here. - Yapper-Media-LLC/yapper-db, read 28 October 2026. Commit
ed6e440e081c7659df0f64070b1a689b6d6fa6fa, 28 October 2026, 17:02 UTC, "First public copy: migrations, access rules dump (Oct 28), SQL tests." Files used:README.md,supabase/migrations/(563 SQL files),access-rules/README.md,access-rules/tables.md,access-rules/policies.md,access-rules/rls-without-policies.md,access-rules/security-definer-functions.sql,tests/sql/run.mjs,tests/sql/harness.mjs, andtests/sql/stage621.test.mjs. The SQL test suite was not executed. No connection was made to the live database, and no account was created. The page names rules and impact. It leaves out call sequences.
What was deliberately left out
- The operator's age, legal name, and any address beyond the two postal addresses printed in the terms.
- Automated "trust scores" and blacklist warnings that new domains pick up in their first days. Scamadviser is cited for the registration date only. A young domain is a fact. A scanner score is not a finding.
- Allegations about other companies that use the name Yapper. They are different products.
- The Next.js CVE argument from the 23 October Reddit post. The framework is identified. A history of advisories in a framework is not a vulnerability in this deployment.
- Step-by-step ways to call the database functions. Database names the rule and the effect. The repository asks for reports to [email protected] and asks people not to test other people's accounts.