-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

==== AntiFreeze Warrant Canary ====

As of 2026-10-05 01:22 UTC (2026-10-04 20:22 CDT), the operator of AntiFreeze (antifreeze.app)
has NOT received any of the following:

  - National Security Letters
  - Secret court orders, including FISA orders
  - Gag orders from any government agency
  - Subpoenas, warrants, or other requests from any government agency for user
    data or logs
  - Any request to introduce a backdoor, weaken security, or hand over
    cryptographic keys

The operator has also not been subject to any legal process that would prevent
this statement from being updated truthfully.

- ---- What AntiFreeze holds ----

There are no accounts for ordinary use, and AntiFreeze collects no names, email
addresses, phone numbers, or dates of birth. A small number of trusted
contributors have Watchdog accounts with a username and hashed password; that
does not apply to anyone reading the map, receiving alerts, or reporting.

Your IP address is never written to our application or web server logs. It is
used in two narrow, one-way forms: a salted hash substituting for a device ID
on the roughly 2% of devices that cannot produce a fingerprint, and a
daily-rotating salted hash used by our self-hosted analytics to count visits
without cookies.

AntiFreeze does store:

  - Sightings: coordinates, address, notes, and photos. These are public.
  - A link between a sighting and the reporting device, kept 72 hours for rate
    limiting and bans, then stripped from the live record.
  - A per-device record: a random device ID, a device fingerprint, abuse
    signals, one current location, and settings.
  - Web push subscription records, which include an endpoint issued by your
    browser vendor. These are persistent per-device values.

Database backups are point-in-time snapshots, so a backup taken inside the
72-hour window holds the reporter link until that backup is destroyed.

We list this rather than claiming to hold nothing, because a specific list you
can check is worth more than a broad claim you cannot verify. Full detail,
including every third party that sees anything, at
https://antifreeze.app/privacy

- ---- Verification ----

Signed with the AntiFreeze key:
  37E6 3F53 B415 0520 54BF  0A31 136D 9E1A 6C90 5354

Published at https://antifreeze.app/pgp.txt and, on infrastructure the operator
of AntiFreeze does not control, at
https://keys.openpgp.org/vks/v1/by-fingerprint/37E63F53B415052054BF0A31136D9E1A6C905354

The fingerprint above is also published at https://keybase.io/antifreezeapp
and at https://www.dailykos.com/user/joshhacks — if the fingerprint on
antifreeze.app ever disagrees with those, trust neither and treat this canary
as void. If one of those mirrors is unreachable rather than contradictory,
that is not by itself grounds to void this statement.

Verify the signature creation date, not the date typed above.

Proof this statement was not signed in advance:
  Bitcoin block 969934
  000000000000000000002454ccb1b4931356fa52602f12e7ede7b7c0122b5953
  "US Air Force removes all bombers from British air base targeted by a
   suspected terror attack" — AP News — updated 2026-10-04 16:56 CDT
  "Bolsonaro beats expectations in Brazil presidential vote, faces Lula in
   runoff" — Reuters — published 2026-10-04 05:04 CDT

- ---- Schedule ----

Updated on the first of each month.

Last updated: 2026-10-05
Next update:  2026-11-01

If this statement has not been updated within 14 days of its scheduled date, or
if it disappears, treat it as expired and assume it no longer holds. A late
update is not by itself proof of legal process, but it should be treated as
though it were.
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEN+Y/U7QVBSBUvwoxE22eGmyQU1QFAmrC/AoACgkQE22eGmyQ
U1RhXBAAk0JEl+mxCgRggXJgWtqeydDYkHNlpzUzJszKzZXJdH2WMwq+loFcrKWE
ua0Cjm7BLz750oCt4bnLYRgbsVfF3mUtYSelVXf5xSqGWJOda/mTd6pSQkoawWkE
NWpaD1l0QlYi9bYyMN0dQiBLWiqw8RelVsWD2+M1j4H34YgPkSoO7ox3AuVegJxd
qI2oq6qbV2LB0Ziwo1qGJGOHBJAcs+EvEQewI0VLkvEax7pXkYdSi3dcZpMt2M4f
yh9Db3pyj7AWgPUI7qHXC7wbIp4HpaAj1Po9YrDLpn8FSdkVHo6pbD/nNXNCPvp+
LZPFsocfnvZZr/sIgH4xFSWOTaAlA3VbNWW8iX9pyeAO+9uUo7uRU3jF7Kk6xxO7
10yg4cSo8G7ffnPu8LwDD3Z+ox/gJMczwzLf45gTFpjnUiYOpQDnvhTxQFF1rMBK
S7bdKrVwTX1xFQcUau8HC5IqiaDkh2l4JVQeOmTP84iigYmULOS6yLwoLo7zqZM+
1hKjHkcrKAj2C8bcktKJhVM5P4d8hOPe+9VlrbaNi1TD02UaQ6UauUrRKMxGiSrw
KOMs7HkcBMWNr/oWCg0Jk19lGIhiwHzNCULWyvdeASghtA+cp7CmbLFzzUP3amOK
7jMKLFsDa3js0NmY+6KN8DvIg8Etfoh/Sgmi8+84zEvRVP/3bhU=
=iqjn
-----END PGP SIGNATURE-----