Privacy policy
JudgeFinder is a free public lookup. You do not need an account to search or read, only to write or report a review, and we do not run advertising or tracking scripts.
What we collect
- Your requests. When you search or open a page, our server receives the address you asked for, which can include the name you searched, plus the usual request details: your IP address, browser and device type, and the time.
- Reports you send. If you report a profile problem, we store what you write, the judge and court it concerns, the email address if you give one, and technical details of the request (IP address, browser type and a daily one-way fingerprint used to spot abuse).
- Emails to us. If you email tanner@meshvault.ai, we receive your address and what you write.
- Security cookies. The site uses a CSRF token to protect forms. MCP consent also uses a short-lived, HTTP-only cookie to bind approval to your browser.
What we do not do
- No account, sign-in or payment is needed for the public lookup. A free sign-in is needed only to write or report reviews.
- No advertising, analytics or tracking scripts, and no cross-site tracking.
- We do not sell your information or share it with data brokers.
How the server handles requests
- Rate limiting. The IP address is a counter key in a rate-limiting service (Upstash) for about a minute so one visitor cannot overload the site.
- Hosting. Vercel hosts the site and keeps its standard request logs, which can include the IP address, the requested address and the time. See the Vercel privacy policy.
- Error reports. Server errors go to an error-tracking server we run ourselves. A report can include the requested address and standard request details, and is deleted after 90 days.
- Database. Our database (Supabase) holds the judge and court records and the reports described above.
JudgeFinder MCP
The Fire Dev LLC operates and sells this optional service. Supabase stores hashed API keys and access tokens, OAuth client names and exact redirect addresses, short-lived consent and authorization-code records, per-key daily usage counts, hashed network rate-limit identifiers, and Stripe customer and subscription identifiers. We do not store raw API keys or MCP tool arguments in usage counters. Vercel still processes standard request logs.
Stripe processes payments and billing details; we do not receive full card numbers. Your chosen AI provider receives the records returned by the tools and handles them under its own privacy terms. Disconnecting there prevents further use by that connector; contact us to revoke an API key or request deletion. Expired OAuth credentials cannot authorize requests. MCP database records remain until maintenance or a deletion request removes them; billing records may be retained where legally required.
Reviews
Reading reviews needs no account. Writing or reporting a review needs a free sign-in. When you do, we store:
- Your review. The ratings you gave, the role you chose (attorney, litigant, juror or other), your headline and text, the judge or court it is about, and when you wrote and last edited it.
- Your account identifier. It links the review to your account so we can enforce one review per judge or court every 12 months and let you edit or withdraw it. It is never shown publicly.
- Bar badge. Whether your account was bar-verified when you wrote it, so a Verified attorney badge can show. Your bar number is not shown.
- Screening and moderation records. Which automatic checks flagged the text (for example a phone number), the review's status (pending, published, rejected or removed), any moderator note, and a log of each moderation action with who took it.
- Reports you file. The reason, any details you write, and your account identifier.
The public sees the ratings, headline, text, role label, Verified attorney badge and date. Moderators see everything above. To limit abuse we count the reviews, edits and reports tied to your account over the last 24 hours. Withdrawing a review removes it from public view. Deleting your account erases the text of your reviews, removes them from the page and averages, and replaces your account identifier on reviews, reports and the moderation log with a random token. Removed reviews are otherwise kept so the 12-month rule and moderation history stay accurate, until you ask us to delete them.
Where the records come from
Judge and court records come from CourtListener, a project of Free Law Project, and related public court records. They are public information about public officials and courts. If a profile is wrong, tell us and we will check it against the source. See data sources.
How long we keep things
Public-lookup rate-limit counters expire within minutes and error reports within 90 days. MCP retention is described above. Reports and emails stay until we delete them. You may request deletion.
Your choices
Email tanner@meshvault.ai to ask what we hold about you, to correct it, or to delete it. California residents have these rights under the CCPA. We do not sell or share personal information for advertising.
Children
The site is not directed to children under 13 and does not ask for personal details.
Changes
If this policy changes, the new version will be posted here with a new effective date.