Evidence Preservation

Online Defamation Evidence Guide | What to Preserve Before Consulting a Lawyer

When facing online defamation or harassment, preserving evidence is the critical first step. Learn what to save, why screenshots alone may fall short, and how to organize your evidence for legal proceedings.

Kiroku Editorial TeamFebruary 14, 202610 min read
Kiroku Editorial Team

This article is for general informational purposes only and does not constitute legal advice. Please consult a qualified attorney for guidance on your specific situation.

Quick Take
  • Preserve evidence the instant you discover defamatory content -- deletion can happen at any time
  • Capture the URL, timestamp, and full page content, not just a screenshot
  • Courts and lawyers need proof that evidence has not been tampered with
  • Kiroku automatically records the capture date and SHA-256 hash, making evidence independently verifiable

Evidence of online defamation must be preserved the moment you discover it -- once a post is deleted, proving what was said becomes far more difficult. However, simple screenshots often lack key details like the URL, capture timestamp, and tamper verification that lawyers and courts require. This guide covers what to save, the limitations of screenshots, and how to organize evidence for disclosure requests and legal action.

When you discover defamatory posts about you online and consider taking legal action, the first obstacle is almost always the same: the evidence is gone. The post has been deleted, the account is deactivated, or the screenshot you took turns out to be insufficient for legal proceedings. Once the offending content disappears, proving what was said becomes exponentially harder.

This guide walks you through the evidence preservation steps you should take before consulting a lawyer. You will learn what information to capture, why screenshots alone may not hold up, and how to organize your evidence so that it is ready for disclosure requests or litigation.

1

Why Evidence Preservation Is the First Priority

When you are targeted by online defamation, the instinct to respond or report is natural. But responding should never come before preserving evidence. If the post is deleted before you save it, you lose the ability to prove what was written, who wrote it, and when. Every legal remedy -- from cease-and-desist letters to disclosure requests to lawsuits -- depends on having concrete evidence of the offending content.

To file a disclosure request (known in Japan as a sender information disclosure request), you need the exact URL of the post, the date and time it was published, and the specific content that constitutes defamation. Without these details, a court cannot identify the post or compel the platform to release the poster's information. Evidence is not optional -- it is the foundation of every subsequent step.

  • The poster deletes the content after being confronted or reported
  • The platform removes the post for violating community guidelines
  • The poster deletes or deactivates their entire account
  • The poster switches to a private or locked account
  • The poster changes their username or display name, making identification difficult
Save before you respond

If you reply, report, or confront the poster, they may delete the content immediately. Always preserve the evidence first, then decide on your next step.

2

Types of Evidence to Preserve

Lawyers and courts need more than a picture of a screen. When preparing evidence of online defamation, you should aim to capture every piece of information that identifies the post, its author, and its context. The following checklist covers the items that are most frequently needed in legal proceedings.

  • The full URL (permalink) of the post -- this uniquely identifies the content
  • The date and time the post was published, and the date and time you saved it
  • The poster's account name, display name, and profile information
  • The complete text of the post (not a partial crop)
  • Screenshots of any attached images or videos
  • Surrounding context: reply chains, quote posts, and thread structure
  • The full HTML of the page (for text search and visual reproduction)
URL and timestamp are non-negotiable

A disclosure request requires you to identify exactly which post, on which URL, at what time. If your screenshot does not include the URL bar, record the URL separately as text. Missing this information can stall or derail the entire legal process.

3

Why Screenshots Alone May Not Be Enough

Screenshots are valuable as a first line of defense, but relying on them exclusively carries real risks. Image files can be edited with basic software, they often omit the URL and timestamp, and they only capture a portion of the page. In legal contexts, the reliability of evidence matters as much as its existence.

Courts and opposing counsel may challenge evidence that consists solely of screenshots. Since any image can be altered, a screenshot by itself offers limited proof that the content actually appeared as shown. Combining screenshots with other forms of evidence -- such as archived HTML, hashed records, and third-party timestamps -- significantly strengthens your position.

  • Images are easy to edit or fabricate, making them vulnerable to challenge
  • The URL is often missing, preventing identification of the specific post
  • The capture date exists only in EXIF metadata, which can be modified
  • Only part of the page is visible, potentially missing important context
  • Text within images cannot be searched, making large volumes of evidence hard to manage
MethodURL RecordedTimestampTamper VerificationFull TextRating
Mobile screenshotNoNoNoNoFair
Desktop screenshot (URL bar visible)YesPartialNoNoGood
Web GyotakuYesYesNoNoGood+
KirokuYesYesYes (SHA-256)YesExcellent

Try saving a page now

4

How to Preserve Evidence with Kiroku

Kiroku automates the entire evidence preservation workflow. When you enter a URL, it captures a full-page screenshot, generates a self-contained HTML archive, creates an AI summary, and records a SHA-256 hash of the content. No technical knowledge is required, and the process typically completes in under a minute.

5 Easy Steps
1
1. Copy the URL of the offending post

Copy the URL from your browser's address bar. For social media posts, make sure you are copying the permalink to the individual post, not the URL of a feed or timeline.

2
2. Open kiroku.today and paste the URL

Paste the URL into the input field on Kiroku's homepage and click Save. No account is required -- the service works without logging in, and processing usually takes 30 to 60 seconds.

3
3. Verify the saved content

Once processing is complete, review the screenshot, HTML archive, and AI summary. Confirm that the defamatory content is fully captured and readable.

4
4. Record the archive URL

Note the Kiroku archive URL (kiroku.today/a/...). This is the link you will share with your lawyer or include in legal filings as a reference to the preserved evidence.

5
5. Set the archive to private if needed

If you are logged in, you can mark the archive as private so that only you can view it. This prevents the poster from discovering that their content has been preserved.

5

Organizing Evidence for Disclosure Requests

A sender information disclosure request is a legal procedure used to identify anonymous posters by compelling platforms and internet service providers to reveal the poster's information. In Japan, the revised Provider Liability Limitation Act (effective October 2022) introduced a streamlined court-order process that enables faster resolution than the previous two-step procedure.

When you engage a lawyer for a disclosure request, they will need precisely organized evidence to draft the court petition. Vague or incomplete information slows the process and weakens your case. Follow these guidelines to prepare your evidence package.

  • Create a table listing each post with its URL, publication date, capture date, and content summary
  • Include the Kiroku archive URL for each post so your lawyer can access the preserved version directly
  • Arrange posts in chronological order -- for sustained harassment, this demonstrates a pattern
  • If the same person made multiple defamatory posts, preserve every single one without exception
  • Save the poster's profile page separately as supplementary evidence for account identification
Legal costs and next steps

For information on legal fees and procedure details, consult your local bar association or legal aid services. In Japan, Houterasu (Japan Legal Support Center) offers free legal consultations. Kiroku is a tool for preserving evidence -- legal strategy and decision-making should be guided by a qualified attorney.

6

Timing and Tips for Evidence Preservation

Timing is the single most important factor in evidence preservation. Countless cases have been weakened because the victim planned to save the evidence later, only to find it deleted. The following practices will help you avoid losing critical proof.

  • Save immediately upon discovery -- this is your highest-priority action
  • Always preserve evidence before responding to, reporting, or confronting the poster
  • Save the same post with both Kiroku and a manual screenshot for redundancy
  • If the harassment is ongoing, save each new post as it appears
  • Preserve the poster's profile page as well -- it helps establish account identity
  • Back up your archive URLs and screenshots to cloud storage or multiple locations
"It is still up" does not mean it is safe

You cannot predict when a poster will delete their content. Some accounts disappear entirely the moment a lawyer's letter arrives. The safest time to save evidence is right now, while it is still visible.

Summary

Evidence of online defamation must be preserved the moment you discover it -- once a post is deleted, proving what was said becomes far more difficult. However, simple screenshots often lack key details like the URL, capture timestamp, and tamper verification that lawyers and courts require. This guide covers what to save, the limitations of screenshots, and how to organize evidence for disclosure requests and legal action.

FAQ

Can I consult a lawyer with only a screenshot?

Yes, you can begin a consultation with a screenshot. However, for disclosure requests and litigation, lawyers typically need the URL and timestamp as well. It is best to preserve this information as early as possible alongside the screenshot.

Is an archive still valid as evidence after the original post is deleted?

Yes. An archive saved before the post was deleted remains valid as evidence. However, it is impossible to archive a post for the first time after it has already been removed. This is why preserving evidence at the moment of discovery is so critical.

Can Kiroku save posts from anonymous forums?

Yes. Kiroku can archive any publicly accessible web page with a URL. This includes anonymous forums, message boards, review sites, and social media platforms.

How much does evidence preservation cost?

Kiroku is free to use for basic archiving, with no login required. Legal fees for lawyer consultations and disclosure requests are separate. Many jurisdictions offer free initial legal consultations through legal aid organizations.

How long will preserved evidence remain accessible?

Kiroku archives remain accessible as long as the service is operational. Screenshots and HTML files are stored in cloud storage. For critical evidence, we recommend downloading copies and maintaining your own backups as an additional safeguard.

Sources

Preserve evidence before it disappears

Defamatory posts can be deleted at any moment. Once they are gone, securing evidence becomes impossible. Save the URL, screenshot, HTML, and hash now -- while the content is still live.