avahit

Law enforcement requests

This page is for police, prosecutors, courts and regulators. It explains what to send, where, and what we can realistically provide. Publishing it is not a courtesy — a service that hosts other people’s content is expected to have a documented process, and users are entitled to know what it is.

Where to send requests

[email protected], or by post to MonacoWebPix, C/o CATS, Le Forum, 28 Boulevard Princesse Charlotte, 98000 Monaco. Requests are accepted in English, French, German and Portuguese. We do not accept requests by telephone, and we do not act on a request that arrives from a free email account without verifiable letterhead.

What a request must contain

  • the issuing authority, case reference, and a named officer with contact details;
  • the legal basis under the law of your jurisdiction;
  • precise identifiers: the profile URL, the post URL, or the exact username. “All accounts connected to this person” is not actionable;
  • the specific data sought, and the period it relates to;
  • a deadline that leaves time for review.

We are established in Principality of Monaco. Requests from authorities outside it are honoured where the applicable mutual legal assistance route has been followed, or where the request is valid under EU law that binds us directly. Voluntary disclosure happens only in an emergency involving a risk of death or serious physical harm, and we document each such case.

What data exists

Deliberately little. In practice we can produce:

  • account registration data: username, email address, sign-up date, age confirmation;
  • public content: posts, comments, boards, and their timestamps;
  • moderation history for the account: what was removed, when, on what ground;
  • click records associated with a post, for a limited window — see the next section.

What does not exist

  • Raw IP addresses of visitors. Click records store a one-way HMAC-SHA256 hash of the IP, never the address itself. We cannot reverse it, and neither can you. Records are deleted after 90 days.
  • Private messages. There is no direct-message feature. Everything on Avahit is public.
  • Payment or financial data. We do not process payments and we do not pay creators; commissions flow from merchants to creators through affiliate networks we are not party to.
  • Location data. We do not collect GPS or precise location.
  • Browsing profiles. We run no analytics of our own.

Preservation

Send a preservation request to the same address, identifying the account or content and the reason. We preserve a snapshot for 90 days and extend once on request while formal process is obtained. Preservation does not disclose anything to you.

Notifying the user

Our default is to tell a user before their data is disclosed, so that they can seek legal advice. We delay or withhold notice where a court or statute forbids it, or where notice would create a risk of harm, destruction of evidence or flight. If a non-disclosure obligation expires, we notify the user then.

Content removal orders

Orders to remove specific content are handled through the process described in content moderation & appeals. We act on valid orders, we tell the affected user which authority issued it unless the order forbids it, and we record the order in our transparency report. Copyright complaints follow the separate route at /dmca.

What we will push back on

Requests that are overbroad, that lack a legal basis, that seek data we have told you we do not hold, or that ask us to identify a person for expressing a lawful opinion. We say so in writing, and we ask for the request to be narrowed rather than ignoring it.

Last updated 2026-08-05.

Last updated 2026-08-05