Law enforcement

This page is for police and other government agencies. It explains how to ask Sarx for information about an account, the legal process we need, how we handle preservation and emergency requests, and what we do when we find child sexual abuse material or trafficking. Sarx is operated by ZuniCor LLC, in the United States.

If you use Sarx and have a safety concern, report it in the app or write to us. If anyone is in immediate danger, call 911.

How to send a request

Email legal@sarx.link from an official government email address. We accept legal process served this way. Please include:

your agency, and your name, title and badge or ID number;
an official email address and phone number we can reach you at;
the legal process itself, signed, as an attachment;
the email address on the Sarx account you are asking about;
the dates and the specific records you need.

We review every request, disclose only what the legal process requires, and ask about requests that are unclear or broader than they need to be. Requests sent through the contact form or from personal email addresses are not accepted.

The legal process we need

For agencies in the United States, under the Stored Communications Act:

Basic account information, such as the email address on an account and when it was created, needs a valid subpoena issued in an official criminal investigation.
Other records about how an account was used, such as when it signed in, need a court order under 18 U.S.C. § 2703(d).
The contents of messages and other content need a search warrant issued on probable cause.

Agencies outside the United States should make their request through a Mutual Legal Assistance Treaty, letters rogatory, or another process that US law recognizes.

Preserving records

On a preservation request under 18 U.S.C. § 2703(f), we keep a copy of the account's records for 90 days while you obtain legal process, and for a further 90 days if you renew the request. Send preservation requests the same way as any other request.

Emergencies

If someone faces a risk of death or serious physical injury and there is no time to obtain legal process, email legal@sarx.link with EMERGENCY in the subject line. Tell us who is at risk, what the emergency is, and why it cannot wait. US law lets us disclose information voluntarily in that situation (18 U.S.C. § 2702(b)(8) and (c)(4)), and emergency requests are dealt with before anything else.

Child sexual abuse material and trafficking

Sarx is for college students aged 18 and over, and has no tolerance for the sexual exploitation of children. When we find apparent child sexual abuse material, whether through a user's report or our own review, we remove it, close the account, preserve the material and the account's records, and report it to the National Center for Missing & Exploited Children (NCMEC) through its CyberTipline, as 18 U.S.C. § 2258A requires. We report apparent child sex trafficking and the enticement of a minor to NCMEC in the same way. NCMEC makes these reports available to law enforcement, and we keep what we reported for one year, as the law requires.

We report apparent trafficking of adults, and credible threats to anyone's safety, directly to the law enforcement agency for the place concerned, and we preserve the account's records when we do.

If you are following up a CyberTipline report, send your legal process to legal@sarx.link and quote the report number.

Telling the account holder

We tell people when an agency asks for their information, before we disclose it, so that they can seek legal advice. We do not tell them when the law or a court order forbids it, such as a non-disclosure order under 18 U.S.C. § 2705(b); when telling them would put someone at risk of death or serious physical injury; or when the request concerns the sexual exploitation of a child. When a non-disclosure order ends, we may tell them then.

What we hold

We can only provide what we have, and what we hold and for how long is set out in our privacy policy. When identity verification is in use, the documents are checked and held by our verification provider, Stripe, not by Sarx.

Changes

We may update this page. The version published here is the one in force.