Messages are not stored — only each visitor's last few are kept while they are here, so this is a live view rather than a history log.

Bot protection is enabled by default. Each visitor's browser solves a small proof-of-work before joining, adding a brief invisible delay that blocks simple raw-socket scripts. Switch it off only when that tradeoff is unnecessary for your site.