Session Zero

Law enforcement guidelines

For law enforcement and legal process · last updated September 24, 2026

Session Zero is operated by 1 Million Little Freaks LLC, a Pennsylvania limited liability company in the United States. This page explains how law enforcement can request records from us, what legal process each kind of record requires, and what we are likely to actually hold.

What legal process we require

We are a US provider and follow the Stored Communications Act (18 U.S.C. § 2701 and following). We do not hand over user records without valid legal process.

• Basic subscriber information (account email address, display name, username, account creation date, most recent sign-in) requires a valid subpoena.
• Non-content records (for example sign-in records, or the fact that two accounts matched) requires a court order under 18 U.S.C. § 2703(d), or a search warrant.
• Content (messages, photos, profile text, quest answers) requires a search warrant issued on probable cause.

Requests must identify the account precisely, by the email address on the account or its username. "Everyone in a city" or "all users matching a description" is not something we can act on.

Emergency requests

If there is an emergency involving a danger of death or serious physical injury to a person, we may disclose information without legal process under 18 U.S.C. § 2702(b)(8). Put "Emergency disclosure request" in the subject line and describe the nature of the emergency, the person at risk, and why the information is needed to prevent harm.

We review emergency requests as quickly as we can. We are a very small team, so please also include a phone number we can reach you on.

Preservation requests

We will preserve records for 90 days on receipt of a valid preservation request under 18 U.S.C. § 2703(f), and will extend once for a further 90 days on request, while you obtain legal process. A preservation request does not itself require us to disclose anything.

Send preservation requests early if an account is involved, because of the retention limits below.

What we actually hold

Being specific saves everyone time. An account may have: the email address and sign-in method used to register, a display name and username, date of birth, profile text and photos, a general location, messages exchanged with other members, matches, and any reports filed by or about the account.

Things we do not hold, and therefore cannot produce:

• Payment card details. Card data goes directly to Stripe, Apple or Google and is never seen or stored by us. Payment records must be sought from them.
• Message content from deleted accounts, beyond what other members still hold in their own conversations.
• Precise location history. We store one approximate location per profile, which is overwritten when it changes, not a trail of past positions.

Retention, and why timing matters

When a member deletes their account, we delete their profile, photos, quest answers, matches, and location. A small amount of information survives for safety reasons: block records, records connected to bans or active safety investigations, and reports the account was involved in. Copies in our encrypted backups age out within 30 days.

This means that for a deleted account we will often have very little or nothing to produce. If an investigation may need records, send a preservation request before the account is deleted rather than after.

Notifying our members

Our policy is to notify a member when their information is requested, so they have an opportunity to object, unless we are legally prohibited from doing so, or where we believe notice would create a risk of harm to someone. If your request includes a non-disclosure order, tell us its duration.

Requests from outside the United States

We are a US company and our records are held in the United States. Authorities outside the US should proceed through a mutual legal assistance treaty, letter rogatory, or another recognised cooperation mechanism. We may respond voluntarily to emergency requests involving a risk to life regardless of where they come from.

Child safety

We report child sexual abuse material to the National Center for Missing and Exploited Children and cooperate with the resulting investigations. See our community guidelines for the conduct rules this sits alongside.

Costs and testimony

We do not currently charge for responding to legal process. We are not able to provide expert testimony, and records are produced with a business records declaration where one is requested.

For members, not law enforcement

If you are a member of Session Zero and someone has made you feel unsafe, do not use this page. Use the report option on their profile or in your conversation, and see support. For an urgent physical danger, contact your local emergency services first.