Anti-spam and usage limits on a public chat

A chat on a public website can be reached by anyone, including bots. Inngame applies these limits to every app automatically, with nothing to turn on.

🔒 Privacy & security2 min read

On this page
  1. Built-in limits
  2. Per-minute limits
  3. Also protecting you

Built-in limits

  • New anonymous players: at most 10 per hour from the same network (IP address) for web sessions. Beyond that, new sessions get a 429 too_many_new_players and the SDK tries again later. Players already known on that browser aren't affected. Native SDK sessions (Unity, iOS) keep only the per-app limit, since many mobile players share their carrier's IP.
  • AI replies for unverified players: at most 20 per hour per app from the same network. Beyond that, messages still reach your inbox and the player is told a team member will reply.
  • AI replies in a row: after 8 without a reply from your team, the AI hands the conversation over.
  • Message length: the AI reads at most the first 2,000 characters of a message; your team sees the whole message (up to 4,000).

Per-minute limits

Players can send up to 20 messages or uploads and 60 events a minute. API keys have 300 requests a minute. Over the limit, the answer is 429 rate_limited with a Retry-After header.

New players per app are also capped per hour (500 on the trial and Indie, 5,000 on Studio).

Also protecting you

  • Network addresses are hashed, never stored in clear.
  • API keys can't connect integrations or move money.
  • Photos are moderated before storage.

Still need help?

Chat with us: our assistant answers right away, and hands you to the team when it can't.