HEAVENA quiet record
Privacy notice
The public map collects only the information needed to process, moderate and display sponsored placements.
Effective August 24, 2026
1. Claim application information
A claim application collects the applicant’s name, email address, proposed brand name, HTTPS website, optional tagline and optional logo image, along with consent and submission time. We use this information to review the request, prevent duplicate or abusive submissions, contact the applicant about moderation and publish approved placement details. Whop processes checkout and payment details under its own privacy notice; HEAVEN stores provider order, checkout, payment, amount and status identifiers, but not full card or bank credentials.
2. Technical delivery data
Hosting and security providers may process IP address, browser and device details, requested URL, timestamp and error or security events. For rate limiting and abuse prevention, the server stores a one-way visitor hash rather than the raw address with a claim. This data is used to deliver and protect the site and diagnose reliability problems.
3. Live activity measurement
The map sets a random, first-party HTTP-only browser token so it can count returning browsers once and estimate how many sessions are active. The database stores a protected hash of that token with first-seen and last-seen times, not the raw token. Public activity figures are display estimates: they can include operator-configured presentation lift, smoothing and momentum in addition to measured browser activity. This token is not used for cross-site advertising.
4. Outbound visit measurement
When you choose an owner’s “Visit website” action, our redirect endpoint records the owner and primary plot, time, a privacy-limited visitor hash, user-agent and referrer so owners can see aggregate interest and abuse can be detected. It then sends you to the owner’s HTTPS destination. The public experience does not use an advertising cookie.
4. Audience counters
The map assigns a random, secure HTTP-only browser token so it can count distinct browsers and estimate recently active sessions without exposing the token to page scripts. Public counters are labeled as estimates and may include presentation offsets and smoothing configured by moderators; measured traffic remains separate in the restricted administration area.
5. Administration and retention
Authorized moderators can review applications and approve or reject them. Applicants can request a single-use, expiring sign-in link sent to their application email; the server stores protected token records and uses a secure HTTP-only session cookie after verification. Restricted moderation tools use a separate authenticated session. Application, authentication, moderation and click records are retained as long as reasonably needed to run, secure and document the project; approved owner details remain public while the placement is live.
6. External links
After our tracked redirect, you leave HEAVEN. The destination may collect information under its own privacy notice. Whop checkout is also an external service governed by Whop’s notices and payment-provider requirements.
7. Your questions
Privacy questions or deletion requests can be sent to the contact address published by the project operator when the public service launches. We will respond as required by applicable law.