warrant canary

A warrant canary is a statement the operator updates on a schedule. If the statement changes or disappears, you should assume something has changed — possibly that the operator has received a legal order they cannot publicly disclose.

As of the date above, the operator of hereornot.xyz:

  * has NOT received any National Security Letter
  * has NOT received any FISA court order
  * has NOT received any gag order
  * has NOT been asked to insert a backdoor into this service
  * has NOT been asked to hand over user keys, plaintext, or login credentials
  * has NOT been compelled to run modified code

This statement will be refreshed at least every 90 days. If it has
not been refreshed in 120+ days, consider it void.

Next scheduled refresh: on or before 2026-07-18.

how to verify

• Check the "last updated" date at the top of this page.
• If the date is older than 120 days, or the statement is missing, treat the service as potentially compromised.
• This page is plain HTML served over HTTPS from Netlify. Use the browser's view-source or compare against the git history (if public).

contact

For legal service, abuse reports on public profiles, or press inquiries: contact@hereornot.xyz (or whatever address is published here). For anything involving encrypted message content: the operator cannot read it and cannot produce it in plaintext.

scope of what we can produce

Under valid legal order, the operator can produce, for a specific handle:

• Account creation timestamp.
• Public profile fields (handle, bio, avatar, visibility flag).
• Encrypted blobs of the user's private key file, messages, and attachments — all ciphertext only.
• The infrastructure provider's (Netlify) IP and request logs, subject to their own policies.

The operator cannot produce:

• Plaintext of direct messages.
• Plaintext of attachments.
• The user's password.
• The user's 12-word recovery phrase.

These are encrypted with keys only the user holds.