A Warrant Canary Is Only Useful If Someone's Actually Watching It
We publish a warrant canary. Most people who see the term for the first time assume it’s either a legal loophole or theater. It’s a little bit of both, honestly, and we’d rather explain the limitations than let the page speak for itself.
What it actually is
A warrant canary is a regularly published statement saying, in effect, “as of this date, we have not received a secret legal order compelling us to hand over user data or stay silent about it.” The trick behind it is legal, not cryptographic: in some jurisdictions, a company can be legally gagged from disclosing that it received a national security letter or similar order, but it generally can’t be compelled to keep lying by continuing to publish a statement that’s become false. So if the canary stops updating, or disappears, that’s meant to be a signal — read between the lines.
Ours gets regenerated monthly with a fresh date. You can read it at pvtlnk.com/canary, and you can download it as a signed text file if you want a timestamped copy for your own records.
Where this gets honest about its limits
A warrant canary only works if two things are true: someone with the legal authority to compel silence hasn’t found a way around it, and someone is actually checking the page regularly enough to notice if it goes stale. Neither is guaranteed.
On the first point — canaries are a legal gray area, untested in a lot of the ways that would matter most, and there’s real debate among lawyers about how enforceable the “can’t compel a lie” theory actually is against a sufficiently aggressive order. We’re not going to overstate what this protects you against. It’s a signal, not a guarantee.
On the second point, which is the one we actually control: a canary that nobody’s watching is just a stale text file. We regenerate ours automatically, on schedule, so the “did they forget” false-negative isn’t a risk — but “did anyone notice it stopped” is a real gap, and it’s on us to make the page worth checking, not just publish it once and consider the box checked.
Why we do it anyway
Because a canary is one of the very few tools that lets a company say something meaningful about government requests before being asked to prove it, rather than only after a leak or a court fight forces disclosure. It’s a small, imperfect commitment to transparency, made regularly instead of once. That’s worth more to us than a static “we value your privacy” line in a policy nobody rereads.
If you’re the kind of person who actually checks these things — and if you’re reading a post about warrant canaries, you probably are — bookmark the page. That’s the only way this particular tool does anything at all.