Secure Drop
Anonymous · Encrypted · No login required
Your message is sealed and anonymous. We cannot identify you. No account or login is needed.
Your message
Max 3 files, 10 MB each
Secure Channel
Anonymous · Bidirectional · Encrypted
Start an anonymous conversation. You'll receive a thread code to check for replies later.
Your message
Max 3 files, 10 MB each
Thread Code
Enter your thread code above to check for replies.

Trust & transparency

A dated statement, with its status visible.

A warrant canary is a published statement tied to a date. Read its status and scope before treating it as an assurance.

Update overdue. The statement below is dated February 6, 2026, with a next update due March 6, 2026. It is historical material, not a current “all clear.” This website review does not renew the statement or attest to the absence of government requests.

Published record

City of Hats Warrant Canary Statement

Published February 6, 2026 · Next update was due March 6, 2026 · Original statement wording retained below.

  • City of Hats has not received any National Security Letters or FISA court orders.
  • City of Hats has not received any gag orders preventing disclosure of government data requests.
  • City of Hats has not been required to provide encryption keys, back doors, or decryption capabilities to any government agency.
  • City of Hats has not been subject to any searches or seizures of its servers, infrastructure, or user data.
  • No government or law enforcement agency has gained access to user content, keys, or metadata stored on our systems.
  • City of Hats has not modified its cryptographic protocols or infrastructure at the request of any third party.

Read the date and the evidence together.

A missing or late update does not, on its own, establish why the statement was not renewed. A current statement requires a fresh review by the organization responsible for it.

Encryption of message content and retention of account, operational or integration data are different questions. Review the documented data boundaries rather than assuming that a provider holds nothing.