Law Enforcement Guidelines

Last updated July 8, 2026

These guidelines are intended for law enforcement authorities seeking information about Nymph user accounts. Nymph is operated by Nymph GmbH ("Nymph", "we", "us"), a company organized under the laws of Germany. We are committed to the safety of our community and cooperate with law enforcement where legally required, while protecting the privacy of our users in accordance with applicable law, including the EU General Data Protection Regulation (GDPR).

If you are a Nymph user looking for help with your account, please do not use the contacts on this page — visit our Support page instead.

How to contact us

All requests from law enforcement, including legal process, preservation requests, and emergency disclosure requests, should be submitted by email to:

legal@nymph.so

To help us process your request without delay, your request must:

• Be sent from an official government or law enforcement agency email address
• Identify the requesting officer or official by name, badge or identification number, agency, and direct contact details
• Include valid legal process issued by a competent authority (see below)
• Identify the account(s) concerned as precisely as possible (e.g. phone number or username associated with the account)
• Describe the specific information requested and its relationship to the investigation

Overly broad or vague requests will be rejected or challenged. We do not accept legal process served on us by users or private parties through this channel, and this mailbox is monitored for law enforcement matters only.

What legal process is required

The type of legal process required depends on the category of data requested:

• Basic subscriber information (e.g. phone number provided at registration, username, account creation date): a valid subpoena, court order, or equivalent legal process issued by a competent authority.
• Usage and log information (e.g. IP addresses, login timestamps, device information): a valid court order or equivalent legal process.
• Content of communications (e.g. messages, photos, profile content): a valid search warrant or equivalent legal process issued by a court, based on a showing of probable cause or the applicable legal standard in the issuing jurisdiction.

We disclose only the data specifically identified in valid legal process and only where disclosure is permitted under applicable data protection law. Please note that some data may no longer be available — accounts and their data that have been deleted by the user may be unrecoverable, and we retain personal data only as long as described in our Privacy Policy.

Requests from outside Germany

Nymph GmbH is established in Germany. Law enforcement authorities outside Germany and the European Union should submit requests through a Mutual Legal Assistance Treaty (MLAT), letters rogatory, or other applicable international legal process, unless a directly applicable legal instrument (such as the EU Electronic Evidence Regulation) provides otherwise. We may reject requests that are not properly domesticated.

Preservation requests

Upon receipt of a valid preservation request from law enforcement, we will preserve the requested account records for 90 days, pending receipt of formal legal process. Preservation may be extended once for an additional 90 days upon a renewed request. A preservation request does not by itself result in any disclosure of data.

Emergency disclosure requests

Where we have a good-faith belief that there is an emergency involving imminent danger of death or serious physical injury to a person, we may disclose information necessary to prevent that harm without prior legal process, as permitted by applicable law.

Emergency requests should be sent to legal@nymph.so with the subject line "EMERGENCY DISCLOSURE REQUEST" and must include a description of the emergency, an explanation of how the requested information will help prevent the harm, and the identity and contact details of the requesting officer. Emergency requests are reviewed on a case-by-case basis.

User notice

Our policy is to notify users of requests for their account information before disclosure, unless we are prohibited from doing so by law or court order, or where we believe in our sole discretion that notice would risk harm to an identifiable individual or group or would be counterproductive to an investigation involving child exploitation or imminent harm.

Child safety

Nymph has a zero-tolerance policy towards child sexual abuse and exploitation. We proactively report apparent child sexual abuse material to the competent authorities and cooperate fully with related investigations. See our Standards Against Child Sexual Abuse and Exploitation for details.

General

These guidelines are provided for informational purposes only, do not constitute legal advice, and do not create any enforceable rights against Nymph. We may update these guidelines from time to time, and we reserve the right to seek reimbursement of costs for responding to requests where permitted by law.