Social Media Evidence for Court Cases: How to Preserve Public Posts

Deletion is the usual response to being served. Somewhere between the moment a subject realises their public feed is heading into a matter and the moment their lawyer answers the first letter, most of what mattered has already gone. That leaves a narrow window for anyone planning to use a person's own social posts in court: preserve while there is still something to preserve.

A public post is a peculiar kind of document. It was written for friends, timestamped by a platform nobody in the case controls, and left where anyone could read it — then, quietly, put in reach of a subpoena. That combination is why public posts end up in domestic, defamation, harassment, small-claims and business-dispute files. It is also why they are fragile: two taps and the exhibit is gone.

Why deletion is the clock

By the time a matter reaches counsel, a decent slice of the useful public posts on a subject's timeline is already gone. People clean up. Accounts flip to private the week a dispute turns formal. The posts that end up mattering are usually the ones the writer would most like unwritten — and the writer, given a day's warning, is often equal to the task.

So the running rule in workplaces that treat public posts as case material is capture-as-you-read. If a post might one day sit in a filing, it needs to be preserved the first time somebody sees it, not the third. The third pass is often on a page that returns not-found.

What counts as social media evidence for court cases

The material courts will look at, in rough order of how easily it lands:

• Public posts on the subject's own account. Posts, replies, quote-posts and comments — anything they wrote where anyone could read it. Easiest to admit, because there is no expectation of privacy attached to them.
• Public reactions. Likes, shares, reposts and public follows can be evidence of what a person endorses, associates with or attends to. Weaker than a written post on its own; stronger as pattern evidence.
• Profile material. Bios, pinned posts, header images, links — the shop window of the account, and often more revealing than a single post.
• Public photos and video. Time-stamped media, sometimes with location metadata, often more persuasive to a court than paragraphs of text.
• Direct messages a party has produced. DMs are private until somebody in the conversation makes them exhibits; then they are evidence, subject to authentication like anything else.

Two categories are not on the list. Private groups you were not in. Locked accounts. A tool that offered you either would be trading a case advantage for a liability, and no court thanks the party that got there by pretexting.

How courts authenticate public posts

Authentication is where amateur preservations fall apart. A screenshot on its own says "somebody, at some point, saw this," which is not the same thing as "this post existed at this URL, at this time, on this account." Rules vary by jurisdiction, but the moves that hold up look similar most places.

• Keep the URL beside the image, always.
• Save the full page, not a crop, so the timestamp, handle and surrounding context travel with the post.
• Note the capture time in your own record — when you took the screenshot, from what device, on what network.
• Where the matter is serious, use notarised capture, a forensic collector, or a service that produces a hash-verified copy of the page. Consumer screenshots start cases; certified captures win them.
• Preserve corroborating material — the reply thread, the profile at the same date, a copy from a second device.

None of this replaces counsel. Local rules on hearsay, best-evidence and self-authentication differ, and a lawyer in your case will know what the court in front of you actually expects. What is universal: the more of a post's context you preserve at the moment of capture, the fewer arguments you face later.

Preserving posts before they vanish

The preservation step every professional workflow assumes: do it before the subject knows. The interval between "they suspect nothing" and "they are being represented" is when the public record is most complete, and it never opens again.

A read of the subject's public posts across their active platforms, done early, does two jobs at once. It shows you the pattern in the record — how they talk, who they attack, what they endorse — and it captures the material while it still exists in public. If the account flips to private a week later, or the post at issue disappears, the copy saved at the moment of reading is what you carry forward.

Say plainly what the scan is and is not. It is a €15 consumer tool for the wide first pass — useful for finding the posts you would otherwise scroll past, and for holding a copy of them while the subject still thinks nobody is reading. It is not certified forensic capture, and anything the case actually rides on still needs proper preservation through counsel or a specialist collector. Two roles, both real; do not confuse them.

A preservation checklist

1. Identify the subject's active public profiles on X, TikTok, Instagram, Facebook and LinkedIn before you touch a post.
2. Do a wide first-pass read of the whole public history and keep a copy of everything that looks relevant, from the moment you see it.
3. Capture full pages, not cropped screenshots - URL, timestamp, handle and surrounding context all included.
4. Note when and how each capture was made, and from what device.
5. For anything that may drive a decision in the case, escalate to a notarised or forensic capture so the chain of custody holds under challenge.
6. Corroborate with a second source when you can - a reply, a quote-post, a mention from another account.
7. Hand the material to counsel with dates, URLs and capture notes, and let them decide what belongs in the file.

The lines and limits

A few things worth stating flatly.

• A read of public posts is not a background check and not an FCRA consumer report. It must play no part — in whole or in part — in any employment, tenancy or credit decision; those decisions belong to a licensed, FCRA-compliant provider with the disclosures and consent the law requires.
• Public means public. Locked accounts, private groups and direct messages you were not part of are out of scope. No logins, no pretexts.
• Adults, 18 and over — no minors' accounts, ever.
• Preservation is not the same as admissibility. What you keep may or may not clear your jurisdiction's authentication bar; that is your lawyer's call, not a tool's.
• A clean scan means nothing in the public record turned up. It is not proof the subject is harmless, or that nothing was ever posted — only the state of the public record on the day it was read.
• Findings are for judgement, not publication. A flagged post is a reason to look closer, never a licence to accuse; counsel decides what goes into the file.

Run in the right order — read first with your own eyes, save what looks relevant the moment you see it, escalate to certified capture for anything decisive, and hand it to a lawyer — the public feed becomes what it always was: candid writing, on the record, kept before the writer thought to take it back.