HEAVENA quiet record
Privacy notice
The public map collects only the information needed to process, moderate and display sponsored placements.
Effective August 24, 2026
1. Purchase and placement information
The plot form collects an email address, proposed display name, HTTPS website, optional tagline and optional logo image, along with consent and submission time. We use this information to process the purchase, prevent duplicate or abusive submissions, contact the buyer and publish paid placement details. Our payment provider processes checkout and payment details under its own privacy notice; HEAVEN stores provider order, checkout, payment, amount and status identifiers, but not full card or bank credentials.
2. Technical delivery data
Hosting and security providers may process IP address, browser and device details, requested URL, timestamp and error or security events. For rate limiting and abuse prevention, the server stores a one-way visitor hash rather than the raw address with a claim. This data is used to deliver and protect the site and diagnose reliability problems.
3. Live activity measurement
The map sets a random, first-party HTTP-only browser token so it can count returning browsers once and estimate how many sessions are active. The database stores a protected hash of that token with first-seen and last-seen times, not the raw token. Public activity figures are display estimates: they can include operator-configured presentation lift, smoothing and momentum in addition to measured browser activity. This token is not used for cross-site advertising.
4. Outbound visit measurement
When you choose an owner’s “Visit website” action, our redirect endpoint records the owner and primary plot, time, a privacy-limited visitor hash, user-agent and referrer so owners can see aggregate interest and abuse can be detected. It then sends you to the owner’s HTTPS destination. The public experience does not use an advertising cookie.
4. Audience counters
The map assigns a random, secure HTTP-only browser token so it can count distinct browsers and estimate recently active sessions without exposing the token to page scripts. Public counters are labeled as estimates and may include presentation offsets and smoothing configured by moderators; measured traffic remains separate in the restricted administration area.
5. Administration and retention
Authorized moderators can review applications and approve or reject them. Applicants can request a single-use, expiring sign-in link sent to their application email; the server stores protected token records and uses a secure HTTP-only session cookie after verification. Restricted moderation tools use a separate authenticated session. Application, authentication, moderation and click records are retained as long as reasonably needed to run, secure and document the project; approved owner details remain public while the placement is live.
6. External links
After our tracked redirect, you leave HEAVEN. The destination may collect information under its own privacy notice. Hosted checkout is also an external service governed by the provider’s notices and payment requirements.
7. Your questions
Privacy questions or deletion requests can be sent to the contact address published by the project operator when the public service launches. We will respond as required by applicable law.