Memex

A social network made for memes.

Whitepaper · July 2026

The gift

A meme is a small gift. Someone compresses a feeling into an image: the dog, the caption, the exact face you make when the meeting could have been an email. They hand it to you, you laugh, and for a second you and a stranger have the same thought at the same time. Then it's over. It asks nothing of you. It doesn't need your reply, your outrage, or your identity. It's finished the moment it lands.

Memes are the only art form the internet invented for itself. Not commissioned by studios, not shaped by editors. Made by ordinary people, remixing each other, in every language, for free, for fun. And they are, by a wide margin, the healthiest thing anyone does on social media: no thread to fall into, no lifestyle to envy, no argument to win. A joke, shared.

Meme sites exist, of course, and they proved something important years ago: people will show up every day just to laugh. But look at how they are built. Infinite scroll, upvote counters, karma, ads wedged between every few posts. They took the meme and wrapped it in the same engagement machinery as everyone else, because that machinery is what pays. And on the big networks memes fare even worse: cropped by algorithms, farmed by aggregator accounts, stacked between outrage bait because outrage keeps you scrolling and the meme, on its own, would let you go.

What has never existed is a network built for the meme on the meme's own terms: ephemeral like the joke itself, anonymous to enjoy, with nothing to win and nobody keeping score. Memex is that home. That single choice, taking the one healthy behavior and refusing the machinery that corrupts it, turns out to decide almost everything else.

The machine that wants

Here is the shortest honest description of a modern social platform: it is an agent, and it wants things from you.

It wants your time, so the feed never ends. It wants your return, so it pings you when you leave. It wants your data, so it watches everything: what you linger on, whom you know, when you sleep. It wants your emotions, because agitation is more profitable than calm. It wants your past, because an archive of everything you've said is leverage for advertisers, for training data, for anyone who ever wants something against you. And it wants you to perform, because a person maintaining an audience produces more inventory than a person talking to friends.

None of this is a scandal. It's the business model working as designed. You are not the customer of a free platform; you are its crop. The harm is real and measured: the comparison anxiety, the shortened attention, the corroded public square. It just doesn't appear on the balance sheet that motivates the design.

The usual response is a nicer policy: better moderation, a wellbeing dashboard, a settings page with more toggles. But a policy is a promise made by the same agent that profits from breaking it. Promises get renegotiated every funding round.

The only durable answer is to change what the thing is. Not a better-behaved agent. An object. A place, not a salesman.

A network that wants nothing

Memex is designed around one axiom: the network must want nothing from you. Where most products derive their design from an engagement goal, every Memex decision derives from the absence of one. Wanting is removed architecturally, so that no future owner, investor, or bad quarter can put it back quietly.

It doesn't want your time. The feed has an end. There is no infinite scroll: after each batch, Memex tells you how many memes you've seen and how long you've been here, and loading more is a button you press, not a reflex it exploits. When you're caught up, it says so and stops. Nothing pings you to come back.

It doesn't want your data. Reading is anonymous by construction. Your identity key signs what you publish; what you consume travels under disposable tokens that cannot be linked back to you. When your app asks for your feed, it doesn't send your follow list. It sends a Bloom filter of the people you follow mixed with random noise, so the server can answer the question without ever learning it. Who you follow, whom you've blocked, and which memes you've saved live only on your phone. The server cannot sell what it structurally does not have.

It doesn't want your past. Everything expires. A meme lives 90 days and then it is deleted: the post, the image, everywhere. Nobody's teenage humor should be a permanent searchable record. If something matters to you, keeping it is your act, not the platform's default. You can extend your own posts, and you can save anyone's meme to your device, a bookmark the network never even learns about. Deletion is first-class too: a signed tombstone that every node honors, not a soft-hide.

It doesn't want your anxiety. There are no public counters. No follower numbers, no like tallies, no view counts, no live trending. None of the scoreboards that turn people into brands. Reactions exist, on a scale from -5 to +5, but you see the community's average only after you've voted, so the crowd never votes for you. The score informs; it cannot recruit.

Popularity does have one home: the best-of galleries, the community's favorite memes of the day, the week, the month, and the year. They are retrospective by design. The day's top is published when the day is over, so there is no leaderboard to chase while it counts, no numbers pinned to anyone's name. Just the memes that made the most people laugh, kept a little longer as a small hall of fame.

It doesn't want to own you. Your identity is an Ed25519 keypair generated on your device. No registration, no phone number, no email, no account to suspend. The client is open source. Content is cryptographically signed and replicated across independently operated nodes, and the protocol those nodes speak is open, so the network can outlive any company, including ours. Exit, with everything, is a protocol feature.

A network that wants nothing has a strange property: it can afford to be honest.

It doesn't need you to stay longer than you meant to, so it can show you the clock. It doesn't need your engagement, so it can let a feed simply end. Every dark pattern is some appetite wearing an interface; remove the appetite and the interface comes out clean.

The machinery

Good intentions are the cheapest part of any platform. This section is how the axiom is enforced by mathematics, in the protocol running today.

Identity is a key, not an account. The device generates an Ed25519 keypair; the public key is the identity. Avatars and handles are derived from it procedurally: every identity gets a face, none reveals anything. The private key never leaves the device except as an encrypted backup the user controls. There is no password to phish, no account database to breach, no authority who can lock you out of your own name.

Everything published is a signed envelope. Every write (a meme, a comment, a deletion, an archive) is a canonical message binding the author's key, a per-author sequence number, a timestamp, and the hash of the content, signed by the author. The content's identifier is derived from that same material, so identical content has an identical id on every node, forgery requires the private key, and anyone can verify anything independently. Trust never comes from the server; it comes from the signature.

Reading leaves no trail. To read, the app proves possession of a key to obtain an anonymous consumption token: a proof of personhood, not of identity. Feed queries carry the noisy Bloom filter instead of a follow list. Reactions arrive under the same anonymous tokens, so the network can count them without knowing who cast them, and aggregates converge across nodes through signed checkpoints rather than per-user records.

Media is addressed by what it is. Images are encoded on-device to AVIF and stored under the hash of their own bytes on commodity object storage behind a CDN. The same image is never stored twice; near-duplicates are caught by perceptual hashing; when the post expires, the bytes are actually deleted. A meme is about 400 bytes of signed metadata plus one shared image. The whole network is deliberately cheap, which is what makes refusing advertising a sustainable position rather than a slogan.

No single feed exists, anywhere. Nodes replicate signed envelopes among themselves: new content is pushed to peers within milliseconds, and periodic reconciliation lets a node that was offline for a week catch up completely on its own. But each node, and each device, assembles its own view from what it has. There is no master timeline to game, no global ranking to buy. Ordering is honestly inconsistent, the way news traveling between towns always was. Two friends already can, and do, run their own nodes and form a network between them.

Next, in order: end-to-end encrypted messaging that ships only when it can ship pure (peer-to-peer, no server copy, no metadata) or not at all; devices joining the distribution mesh directly over WebRTC with NAT traversal and community relays, speaking the same envelope protocol the nodes speak today; and community-run nodes taking over more of the infrastructure. The design is finished; the code is honest about which parts exist, and this paper is too.

What Memex refuses to build

A network is defined as much by its refusals as its features. These are permanent, and the open client makes them verifiable:

What pays for it, then? The people who use it. The free tier is the full product; a subscription adds conveniences such as longer archives, opt-in vanity, and early features, priced for each region, starting with Mexico. Because the infrastructure is small on purpose, a modest number of subscribers sustains the whole network. The customer is the user. There is no one else in the room.

Why this is worth building

Somewhere along the way, "social network" came to mean a place you manage: an audience, a persona, a permanent record, a score. The feeling most people have when they close those apps, a little worse and a little later than they meant, is not a personal failing. It's the product working.

Memex is a bet that the opposite can also be a product: a place you visit. You open it, you laugh at a few dumb perfect images made by people you chose, maybe you send one thing back into the world, and it lets you leave. In ninety days the evidence is gone, and that's the point. What remains is the only thing that was ever real about it: for a moment, you and someone else thought the same thing was funny.

Everything technical in this paper (the keys, the envelopes, the Bloom filters, the expiring storage, the replicated nodes) exists to protect that small moment from every force that has learned to monetize it.

A meme is a gift. The network that carries it should be one too.