Warrant Canary

A warrant canary is a dated negative statement: categories of legal demands Whenary has not received. Updating it reaffirms that all-clear. If this page disappears, goes stale past the due date, or loses required denials, treat the canary as having died. The operator never uses this page to affirmatively disclose gagged process.

Issued September 9, 2026. Next update due March 9, 2027.

Statement

-----BEGIN CANARY STATEMENT-----

Issued by: Whenary (whenary.com)
Statement date: 2026-09-09
Next update due: 2027-03-09

As of the statement date above, Whenary has:

  1. NOT received any National Security Letter (NSL) issued
     under 18 U.S.C. ss 2709.

  2. NOT received any FISA court order, including orders
     issued under 50 U.S.C. ss 1881a (Section 702) or any
     other provision of FISA.

  3. NOT been subject to any secret or gag order that
     prevents us from disclosing a government demand.

  4. NOT received any demand to modify the service to
     facilitate surveillance, install backdoors, or provide
     covert access to user data.

  5. NOT received any demand for bulk or mass collection
     of user data.

  6. NOT been subject to any judicial, law-enforcement, or
     government order we are prohibited from describing.

Whenary has NOT placed any intentional vulnerabilities,
backdoors, or hidden surveillance capabilities in any part
of the service.

This statement covers the official hosted service at
whenary.com operated as of the statement date. It is
updated at least every six months. If this page is not
updated by the next-update date above, or if it is
removed, treat the canary as having died.

Key fingerprint: EEBF 890C 975A A1D6 4331 5962 7C83 207D D1A2 2E53
Signed by: Whenary Releases <[email protected]>

-----END CANARY STATEMENT-----

PGP signature

The live statement is signed with the Whenary Releases PGP key. Verify by downloading the signed version and checking against the published public key. Until a new clearsigned file is published after a check-in, prefer the last verifying signature.

Key: EEBF 890C 975A A1D6 4331 5962 7C83 207D D1A2 2E53 (Whenary Releases <[email protected]>, Ed25519, expires 2028-07-30)

Download signed statement (.asc)Bundled signed statement Download public key

# Verify with GnuPG:
curl -O https://whenary.com/pgp.asc
gpg --import pgp.asc
curl -O https://whenary.com/api/canary/signed.asc
gpg --verify signed.asc

How to read this canary

Presence: This page exists, denials are intact, the next-update date is in the future, and the signature verifies. The canary is alive.
Absence or staleness: If this page is removed or the next-update date passes without a new signed statement, treat the canary as having died. That silence is the signal. We do not publish an affirmative gagged disclosure.
Changed wording: If any numbered denial is removed or weakened, that itself is a signal for that category.
Invalid signature: If the PGP signature does not verify, do not trust the statement.
Coverage calendar: Covered days were included in a check-in window. Awaiting days follow the latest coverage. Gaps between windows are red.

Update schedule

This canary is updated at least every six months. Operators record check-ins that advance the statement date and coverage window, then clearsign offline and publish the signature. Check-in history is retained so coverage can be audited over time.

Scope

This statement covers the official hosted service at whenary.com operated as of the statement date. It does not cover infrastructure providers (Hetzner, Cloudflare, etc.), which operate under their own transparency practices, or self-hosted instances operated by third parties.

Voluntary third-party requests (copyright complaints, etc.) are not covered here. See the Privacy Policy and Terms of Service for how we handle those.