F-Law

Privacy Policy

Last updated 2026-09-21

Your matters, encrypted so even we can’t read them.

Case details you save are encrypted in your browser with a key we never receive - we store only ciphertext. We don’t mine your cases to market to you or to profile litigants. Your work product is yours alone.

Because even we can’t read it, there’s nothing to breach, subpoena, or hand over - and no copy of your numbers can quietly turn up on the other side of your case.

F-Law is built for legal professionals, and its guiding rule is simple: the most private way to handle client information is not to be able to read it. The tools run on your device wherever they can, and where we now offer an account to save your work, your case data is encrypted so that even we cannot see it. This policy says exactly what we collect, what we store, and what we cannot access.

Your account and profile

A free account saves and reuses your matters across devices. To create one we store your email address and a verification of your password - a value derived from your password in your browser (never the password itself), which we hash again on our servers. You may also give us a practitioner profile: your name, Nevada bar number, firm, phone, office address, website, firm logo, and photo - all optional, and bar membership is not required. Profile fields exist so the site can address you properly, print your firm masthead on your exhibits, and let us respond to support requests; the bar-number autofill asks the Nevada Law Directory for your public listing at the moment you use it and stores nothing about anyone who does not create an account. We also record the version of the Terms of Service you accepted and when. We use your email to sign you in and to send account and security notices. We do not sell any of it or share it for advertising.

Cookies

When you sign in we set one cookie of our own: a signed, http-only session token so you stay logged in. It is not used for tracking or advertising, and there are no advertising cookies. When the traffic measurement described below is running, Google Analytics sets its own cookies to tell a returning browser from a new one; if your browser asks not to be tracked, no analytics cookie is set either. Your light/dark theme preference is saved in your own browser’s local storage - not a cookie - and is never transmitted.

Your case data is encrypted so that even we cannot read it

When you save a matter, the case details are encrypted in your browser using a key derived from your password that is never sent to us. We receive and store only the resulting ciphertext, plus a copy of your data key that is itself wrapped by that password-derived key (also unreadable to us). We cannot decrypt your matters, produce their contents in response to a subpoena, or mine them - because we do not hold the key. Changing your password re-wraps the key without touching your data; a one-time recovery key issued at signup is the only way to recover after a forgotten password, and if both are lost the data is unrecoverable - by design.

Email verification

At signup we email a 6-digit confirmation code to your address (from [email protected]) and store only whether the address verified. Your email exists for sign-in, verification, and account recovery - no marketing follows from it. Text-message two-factor sign-in may be offered as an added option later.

Traffic measurement

We use Google Analytics 4 to count visits and see which tools get used, in aggregate. Google signals, advertising features, and ad personalization are turned off, Google Analytics 4 does not log or store IP addresses, and nothing about your account, your matters, or the figures you type is sent to it. If your browser sends a Do Not Track header or a Global Privacy Control signal, the analytics script is not loaded at all: no request, no cookie.

What we do NOT do

We don’t run advertising pixels, session recorders, or third-party trackers. We don’t mine your cases to market to you or to profile litigants. There is nothing here that we sell.

Document review (Scrutinizer) - two layers, one of them on our server

When you paste or upload a draft order for review, your file is parsed on your device - the PDF and Word readers ship with this site rather than being fetched from a third party - and the rule-based layer of the review runs entirely in your browser. The deeper, AI-assisted layer runs by default for signed-in reviews: the document text is sent once, over an encrypted connection, to our server, which passes it to an AI model run by a third-party provider to produce additional findings. We do not store or log the document text. The findings appear on screen; our server holds them in memory for no more than fifteen minutes so that your browser can collect them and so that re-running the same document does not repeat the model call, then discards them. The deeper layer is capped in size and rate limited. To keep a document on your device entirely, check “Skip the deeper review for this document” before running; the choice is remembered in your browser, and with it checked nothing about the document leaves the page.

Document drafting (Preparer) - generate, stream, discard

The drafting wizard sends your answers once, over an encrypted connection, to our document generator. The generator assembles the document in memory, streams the file straight back to your browser, and retains nothing: no database, no saved documents, no content in any log. When your download completes, the data no longer exists on our side.

Social Security numbers in the Preparer

Almost every order the Preparer drafts takes the parties’ Social Security numbers under separate cover or on a page that is never filed, and the wizard does not ask for them. Three state retirement systems require the complete numbers on their own paper, and for those the wizard asks: the New Jersey NJSEDCP order’s Confidential Addendum (N.J. Court Rule 1:38-7(e)), a Massachusetts G.L. c. 32 order when you elect to place them in the impounded filing (Probate and Family Court Standing Order 3-08) or on its separate identifier page, and the Tennessee TCRS form TR-0466 or its TR-0467 affidavits (Tenn. Comp. R. & Regs. 1700-03-03). A Social Security number typed into any other field is refused, not printed. The document generator handles them exactly like every other drafting answer: sent once over an encrypted connection, placed into the document in memory, never logged, and never written into the counsel notes or the download headers. When you save the packet to a matter, the numbers are stored inside that matter’s client-side encrypted container together with the rest of your answers - decryptable only with your password or recovery key, never readable by the site, and never in headers, notes, or logs - so the order can be regenerated or amended without retyping them. If the preparer is not attached to a matter, nothing is retained after the download.

Calculators

The retirement-division and other calculators run in your browser. The figures you enter are not sent to our servers unless you choose to save them to your encrypted account vault - in which case they are encrypted in your browser first, exactly as described above.

Case library

The case library is public legal information - published court decisions and summaries. Reading it requires no account and involves nothing beyond the aggregate traffic measurement described above.

Client matters

A matter holds a case’s caption and each calculator’s saved inputs so that returning to a case starts from the saved schedule, not a blank form. Everything in a matter is encrypted in your browser before it is saved, exactly as described above - we store ciphertext we cannot read.

Technical operation

Like any website, the site is delivered through standard internet infrastructure (a content-delivery network in front of our server), which processes connection metadata such as IP addresses to route traffic and absorb attacks. Our application keeps minimal technical logs strictly for reliability and security - and those logs never contain the content of your documents, your drafting answers, your case data (which we cannot read), or your password.

A note on professional confidentiality

The tools are designed so that using them does not place client confidences in a third party’s hands: the rule-based review happens on your machine and the deeper layer can be skipped per document, drafting data exists on our side only for the seconds it takes to assemble your document, and saved matters are encrypted so that even we cannot read them. You remain responsible for your own confidentiality judgments under the rules of professional conduct.

Your choices

You can delete any matter, or your entire account, at any time. Deleting your account removes your stored ciphertext and your account record.

Changes

If this policy changes, we will update the date above and describe what changed here. 2026-09-21: the Social Security numbers section now says what happens when a Preparer packet is saved to a matter - the complete answer set, the numbers included, is kept inside the matter’s client-side encrypted container so the order can be regenerated or amended; the earlier sentence that saved matters do not hold them was wrong and is withdrawn. The generator itself still processes them in memory only, and an unattached packet retains nothing. 2026-09-20: added the Social Security numbers section - the Preparer now asks for the complete numbers on three state retirement-system orders whose own paper requires them (New Jersey NJSEDCP, Massachusetts c. 32, Tennessee TCRS), processed in memory and never stored; every other order still takes them under separate cover. 2026-09-18: the account now records the version and time of your acceptance of the Terms of Service; the profile section lists every optional profile field we store; the review section names the AI model as run by a third-party provider; you can delete your account yourself from the account page; and the bar-number autofill now asks the Nevada Law Directory on demand instead of keeping a copy of the public bar roll (that copy has been deleted). 2026-09-13: added a recovery-key reset; the server stores a verifier derived from your vault key so it can confirm a reset request without being able to decrypt your matters. 2026-09-06: the deeper, AI-assisted layer of the document review now runs by default for signed-in reviews rather than on request; the review section above describes what is sent, what is kept (nothing), and the per-document skip. 2026-09-05: added the traffic-measurement section and the cookies it involves. Analytics went live on 2026-08-26, and until this update the page still said we ran none; that gap was ours, and this page now describes exactly what runs. The encrypted matter model, the review tool, and the drafting tool are unchanged.

Contact

Privacy questions? Use our contact form.