Law Enforcement Requests Policy

Last updated: 25 August 2026

1. Our approach

We do not disclose user data to law enforcement or government authorities just because a request is received. Every request is reviewed by us against applicable law before any data is disclosed.

2. What we require

Requests must: come through official legal channels (e.g. a valid Greek/EU court order, warrant, or legally binding request under applicable mutual legal assistance frameworks); identify the specific legal basis for the request; identify the specific account/data requested (we do not accept bulk or vague requests); and come from an identifiable requesting authority. Emergency requests (imminent risk of death or serious injury) are handled on an expedited basis but are still logged and reviewed.

3. User notification

Where legally permitted, we notify the affected user that their data was requested, before or after disclosure. We only withhold notification where we are legally prohibited from giving it (e.g. a valid non-disclosure order) or where notification would genuinely endanger an investigation or a person's safety.

4. What we log for every request

We keep an internal record for each request including: request ID, requesting authority and country, legal basis cited, information requested, date received, date responded, what (if anything) was disclosed, and our reasoning. This feeds into our aggregate Transparency Report.

5. Cross-border requests

As an EU-based service, we assess non-EU government requests against EU law, including whether disclosure would be compatible with GDPR, before responding.

6. Contact for authorities

Legal requests should be sent to zinklystudio@gmail.com via official channels. This address is not for user support — see our Legal Notice for general contact.