Show HN: Prism – Self-hosted notification gateway (Signal, Telegram, WebPush)

The Quiet Revolution: How One Developer Built a Private, Self-Hosted Notification System to Escape the Surveillance Economy

In a digital age where every ping, buzz, and notification is funneled through corporate servers—often with little transparency or user control—one developer has taken a bold step back toward digital autonomy. Meet Prism, a self-hosted notification gateway that empowers users to receive alerts from apps and services without surrendering their privacy to Big Tech. Built by a de-Googled Android user frustrated by the lack of private push notification options, Prism is not just a technical workaround—it’s a philosophical statement about digital sovereignty.

Unlike mainstream notification systems that rely on Google’s Firebase Cloud Messaging (FCM) or Apple’s APNs, Prism operates entirely independently. It accepts webhook notifications via an ntfy-compatible API and routes them securely to Signal, Telegram, or WebPush—all while giving users full control over their data. With an optional Android companion app acting as a UnifiedPush distributor, Prism bridges the gap between modern convenience and privacy-first design. And yes, despite sharing a name with the NSA’s controversial surveillance program and a few YC-backed startups, this Prism is anything but opaque.

Why Privacy in Push Notifications Matters

Push notifications are one of the most intimate forms of digital communication. They appear on your lock screen, vibrate your wrist, and often contain sensitive information—from two-factor authentication codes to security alerts from your smart home. Yet, most users don’t realize that every time an app sends a push notification, it typically routes through a third-party service like Google or Apple. This means your notification metadata—timestamps, device identifiers, app usage patterns—is logged, analyzed, and often monetized.

For privacy-conscious individuals, especially those using de-Googled Android devices or self-hosted services, this is a dealbreaker. UnifiedPush offers a decentralized alternative, but it only works for apps that natively support it. Most mainstream and self-hosted apps—like Home Assistant, Beszel, or custom scripts—don’t. That’s where Prism steps in. By acting as a notification gateway, it allows any service that can send an HTTP webhook to deliver alerts privately and securely.

Prism’s architecture is designed to minimize trust. The server component, written in Go, runs on your own hardware—whether that’s a Raspberry Pi in your basement or a cloud VPS you control. It doesn’t store message content long-term, and all communication is encrypted. The Android app, meanwhile, uses Mozilla’s autopush service by default to deliver WebPush messages, but crucially, it pairs with your server via encrypted subscriptions, ensuring that even Mozilla can’t read your notifications.

How Prism Works: A Technical Deep Dive

At its core, Prism is a lightweight, self-hosted service that translates webhook requests into private notifications. It’s compatible with ntfy, a popular open-source push notification service, which means any tool that supports ntfy can easily integrate with Prism. For example, if you’re running a monitoring system like Beszel to track your servers, you can configure it to send alerts to your Prism instance instead of relying on external services.

When a webhook is received, Prism evaluates the destination—Signal, Telegram, or WebPush—and routes the message accordingly. For Signal and Telegram, it uses their respective APIs to send messages directly to your account. For WebPush, it leverages encrypted browser subscriptions to deliver notifications to your devices, even when the app isn’t open.

The Android companion app plays a crucial role. It acts as a UnifiedPush distributor, meaning it can receive messages from Prism and deliver them to any UnifiedPush-compatible app on your device. But it goes further: it pairs with the Prism server through encrypted WebPush channels, ensuring end-to-end privacy. By default, it uses Mozilla’s autopush infrastructure, but users can configure it to use their own push relay if desired.

One of Prism’s standout features is its custom Proton Mail integration. When you receive a Proton Mail notification through Prism, it includes quick reply actions—letting you respond directly from the notification shade. Even more impressively, if you read the email on another device, the notification is automatically dismissed on all your devices. This kind of synchronization is typically only found in proprietary ecosystems like Apple’s or Google’s, but Prism achieves it through clever use of WebPush and client-side logic.

Real-World Use Cases: From Home Automation to Server Monitoring

Prism isn’t just a theoretical privacy tool—it’s already solving real problems for its creator and early adopters. One of the most compelling use cases is home automation. Imagine your Home Assistant system detects a water leak from a sensor under your sink. Instead of sending an alert through a cloud service, it triggers a webhook to your Prism instance, which instantly sends a rich notification to your phone via Signal—complete with a snapshot from your security camera.

Similarly, if your self-hosted Beszel instance notices a server going offline, it can ping Prism, which forwards the alert to Telegram with details like CPU usage and uptime. This level of integration turns Prism into a central nervous system for your digital life, all while keeping your data local.

Another powerful application is custom scripting. Developers can use Prism to notify themselves of script failures, backup completions, or CI/CD pipeline updates. For example, a Python script that scrapes data from a website can send a “success” or “error” notification through Prism, ensuring the developer stays informed without relying on external services.

Even personal productivity tools benefit. The Proton Mail integration allows users to stay on top of encrypted emails without installing Proton’s official app, which may not be available on de-Googled devices. The quick reply feature turns notifications into actionable interfaces, reducing the need to open apps constantly.

The Philosophy Behind Prism: Digital Autonomy in Practice

Prism is more than a piece of software—it’s a manifestation of a growing movement toward digital self-reliance. In an era where cloud services dominate, self-hosting is often seen as niche or overly complex. But tools like Prism lower the barrier, offering a practical way to regain control without sacrificing functionality.

The developer behind Prism is part of a broader community of privacy advocates, open-source contributors, and de-Googlers who reject the convenience-over-privacy tradeoff. By building Prism as free and open-source software (FOSS) under the AGPL v3 license, they ensure that anyone can inspect, modify, and redistribute the code. This transparency is essential for trust, especially in security-sensitive applications.

Prism also reflects a shift in how we think about notifications. Rather than treating them as passive alerts, the project reimagines them as secure, actionable, and private communications. The integration with Signal and Telegram—both end-to-end encrypted platforms—reinforces this vision. It’s not just about receiving a message; it’s about doing so without intermediaries.

Moreover, by supporting UnifiedPush, Prism contributes to a larger ecosystem of decentralized tools. UnifiedPush itself is a community-driven standard that allows apps to receive push notifications without relying on Google or Apple. Prism extends this vision by acting as a bridge for services that don’t natively support it.

Challenges and Limitations: The Road Ahead

Despite its strengths, Prism is not without challenges. One of the biggest hurdles is adoption. For Prism to be truly effective, more apps and services need to support webhook-based notifications or integrate with ntfy. While many self-hosted tools already do, mainstream apps rarely offer this flexibility.

Another limitation is reliability. Because Prism relies on external services like Signal and Telegram for message delivery, it’s only as reliable as those platforms. If Telegram’s API goes down, Prism notifications via Telegram will fail. Similarly, WebPush depends on browser support and push service availability.

There’s also the issue of battery life. Push notifications are designed to be efficient, but running a background service like the Prism Android app could impact device performance. However, the developer has optimized the app to minimize resource usage, and early reports suggest it’s lightweight.

Looking ahead, the Prism team could explore integrating with other privacy-focused platforms like Matrix or Session. They might also consider adding support for SMS fallback or local network delivery for offline scenarios.

The Bigger Picture: A Blueprint for Private Communication

Prism is more than a notification gateway—it’s a blueprint for how we can build private, interoperable, and user-controlled communication systems. In a world where digital surveillance is increasingly normalized, projects like Prism remind us that alternatives are possible.

By combining the simplicity of webhooks with the security of end-to-end encryption and the flexibility of self-hosting, Prism offers a compelling alternative to the walled gardens of Big Tech. It’s a tool for developers, privacy enthusiasts, and anyone who values control over their digital life.

As more people seek to disconnect from corporate ecosystems, tools like Prism will play a crucial role. They prove that privacy and functionality aren’t mutually exclusive—and that sometimes, the most revolutionary ideas come from individuals building solutions for themselves.

This article was curated from Show HN: Prism – Self-hosted notification gateway (Signal, Telegram, WebPush) via Hacker News (Newest)