Law Enforcement Guidelines
Last updated: March 4, 2026
These guidelines explain how YBuffet Inc. responds to requests for user data from law enforcement agencies, government authorities, and courts. We are committed to protecting user privacy while fulfilling our legal obligations. These guidelines are published in the interest of transparency.
1. Our Commitment
YBuffet takes user privacy seriously. We will not disclose user data to law enforcement or government authorities unless legally required to do so. We scrutinize all requests carefully, require valid legal process, and will challenge requests we believe are overbroad, legally deficient, or inconsistent with applicable law.
2. Types of Valid Legal Process
The type of legal process required depends on the category of data requested:
Basic subscriber information (name, email address, account creation date, IP address at account creation): requires a valid subpoena, court order, or search warrant.
Account activity and usage data (IP addresses associated with logins, pages visited, session timestamps): requires a court order issued under 18 U.S.C. § 2703(d) or equivalent, or a search warrant.
Content data (private messages, uploaded files, forum posts not publicly visible): requires a search warrant based on probable cause.
Real-time surveillance or interception: requires a wiretap order or equivalent under applicable law.
We do not comply with informal requests, voluntary information sharing requests, or requests that lack valid legal process, except in emergency situations as described in Section 5.
3. How to Submit a Request
Law enforcement agencies seeking user data from YBuffet should:
Submit requests by email to grow@ybuffet.com with the subject line "Law Enforcement Request"
Include the full legal process document (subpoena, court order, or warrant) as an attachment
Specify the user(s) whose data is being sought, the type of data requested, and the relevant time period
Include contact information for the requesting agency and officer
We respond to valid requests in the order received. Response times vary based on the complexity of the request and our current volume. For emergency requests, see Section 5.
4. User Notification
YBuffet’s default policy is to notify affected users of law enforcement requests before complying, unless:
A court has issued a non-disclosure order prohibiting notification
Notification would be prohibited by applicable law
Notification would create an imminent risk to the safety of a person or the integrity of an investigation
Where we provide notice, we will do so by email to the address on the user’s account. If the notification window passes without a legal challenge from the user, we will comply with the request.
We may seek to modify or vacate non-disclosure orders when legally permissible, particularly where the order lacks adequate legal basis.
5. Emergency Disclosures
We may disclose user data without legal process in situations involving an imminent threat to the life or physical safety of a person, as permitted by 18 U.S.C. § 2702(b)(8) or equivalent law. Emergency requests must:
Come from an authorized law enforcement officer
Describe with specificity the nature of the emergency and the imminent threat
Explain why normal legal process cannot be obtained in time
Emergency disclosures are limited to information reasonably necessary to address the stated emergency. We will seek formal legal process following emergency disclosures.
5. Data Preservation
We will preserve user data for 90 days upon receipt of a valid written preservation request, pending receipt of formal legal process compelling production of the data. Preservation requests must identify the specific user account(s) and the categories of data to be preserved. We may extend preservation for an additional 90 days upon receipt of a renewal request.
Preserved data will be held securely and accessed only as required by law. We will notify you of preservation requests to the extent permitted by applicable law.
6. Challenging Overbroad Requests
YBuffet will challenge requests that we believe are overbroad, legally insufficient, or inconsistent with applicable law. We reserve the right to:
Request clarification or narrowing of requests that seek excessive amounts of data
Challenge non-disclosure orders that lack sufficient legal basis
File motions to quash or modify subpoenas or court orders that are procedurally or substantively deficient
Seek compensation for significant compliance costs associated with complex requests
7. Requests from Outside the United States
For requests from foreign governments and law enforcement agencies, we require compliance with applicable mutual legal assistance treaty (MLAT) processes or other valid legal mechanisms recognized under U.S. law. We do not comply with direct requests from foreign authorities that lack a valid U.S. legal basis.
8. Transparency Reporting
YBuffet intends to publish an annual transparency report summarizing the number and types of law enforcement requests received, the number complied with, and the number challenged or rejected. The first report will be published within 12 months of Platform launch.
9. Changes to These Guidelines
We may update these guidelines from time to time to reflect changes in law or our practices. Material changes will be published at ybuffet.com/legal/law-enforcement-guidelines with 30 days notice.