Fluxer is run by a Swedish company, and a government outside the EU can't enforce an order for your data against us without going through Swedish authorities. Swedish prosecutors and courts then decide what happens under Swedish law, and we also review every request we get under section 14 of our privacy policy.
Until we move fluxer.com to our own hardware in Sweden, most of its stored data is with Vultr, a US hosting provider, in Piscataway, New Jersey, and US authorities can send orders for that data to Vultr directly, as our CLOUD Act article explains.
How does a government outside the EU ask for my data?
Most countries send a request for legal assistance to the Swedish Ministry of Justice, which passes it on to the Swedish Prosecution Authority or a Swedish court. Norway, Iceland, Switzerland and Liechtenstein can send theirs to a prosecutor or court directly.
A request like this usually takes several months, and Swedish prosecutors and courts can use only the measures Swedish law allows in a Swedish case. Before Sweden helps with a search or a seizure, what the person is accused of has to be a crime in Sweden too.
Requests from the US to Sweden follow the treaty on legal assistance between the two countries, and our CLOUD Act article explains what US authorities can and can't ask for.
When does Sweden turn a request down?
Sweden has to turn a request down when helping would harm its sovereignty, its security or other essential interests, or go against Swedish legal principles. For most countries it can also refuse when the case is about a political or military offense. These rules are in the Swedish law on international legal assistance in criminal cases.
Can a court outside the EU order Fluxer to hand over data?
A court order or decision from a country outside the EU can't be enforced against us in the EU unless a treaty backs it, such as a treaty on legal assistance, as Article 48 of the GDPR says. We tell authorities outside the EU to use the treaty route through Sweden, and we review every direct request we get under section 14 of our privacy policy, where we narrow or reject invalid or overbroad ones before we disclose anything.
Can police in other EU countries get my data?
Police and prosecutors in other EU countries have to follow the EU's e-Evidence rules, which limit what they can ask for and give Sweden a say in many cases. Since August 18, 2026, they can send an order for electronic evidence to us in Sweden.
- An order for account details, or for an IP address to identify who used it, has to be issued or approved by a judge, a court or a public prosecutor.
- An order for message content or other details of your activity has to be issued or approved by a judge or a court. It's allowed only for crimes that can lead to at least three years in prison, or for a few listed crimes such as child sexual abuse and terrorism.
- When the order is for message content or activity details and you don't live in the country that sent it, a Swedish prosecutor gets a copy of the order at the same time and can refuse it. A refusal can be because the order would breach fundamental rights or press freedom, or because the act isn't a crime in Sweden.
- The authority that sends the order has to tell you about it, unless the law of that country lets it wait or stay silent to protect an ongoing investigation.
We review these orders under section 14 of our privacy policy, like every other legal request, and we tell you before we disclose anything unless the law forbids it or there's a genuine emergency. The rules for these orders are in Regulation (EU) 2023/1543.
What about Swedish authorities?
Swedish police and prosecutors need a decision under Swedish law, and our article on how Swedish and EU law protect your data explains what they need.
How can I limit the data Fluxer has about me?
Section 2 of our privacy policy lists everything we collect on fluxer.com, and Fluxer has no third-party analytics, browser fingerprinting or ad tracking.
- You can delete your own messages in bulk with "Delete my messages".
- You can export your data and delete your account.
- End-to-end encryption is planned, but nothing on Fluxer has it yet.
- Until we move fluxer.com to our own hardware in Sweden, most of its stored data is with Vultr, a US hosting provider, in Piscataway, New Jersey, and US authorities can send orders for that data to Vultr directly, as our CLOUD Act article explains.
- On a self-hosted instance, Fluxer has none of that instance's messages, files or accounts to hand over, and its own admins decide where they're stored.