Love Your Country

Privacy Policy

Love Your Country · loveyourcountry.co · country.love Last updated: 29 October 2026

Short version: there are no accounts, no ad trackers and no card numbers. We keep the little we need to deliver your hearts, show the board, pay our taxes and follow sanctions law. Your name and blessing are public because that is the point of the site; you can ask us to take them down at any time.

1. Who is responsible

The controller of your data is All Ways Up Technologies LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA. Email for anything about privacy: hello@all-ways-up.com.

2. What we collect

When you just look at the site

  • Server logs: your IP address, the pages you request, time, browser type. Kept 90 days, then deleted.
  • The country we derive from your IP address (used to show you the right language and, at payment, to apply sanctions blocks and tax rules).
  • A language preference (a cookie or local setting) if you switch languages. No other cookies. No analytics scripts, no ad pixels, no fingerprinting.

When you send hearts

  • The name or nickname you type (you may leave it blank or use a nickname).
  • Your blessing text, if you write one.
  • The country you chose, the number of hearts, the amount, the time, and the status of your order.
  • Payment references: the network, the blockchain transaction hash, the sending address, the amount received and the time. This is data that already exists publicly on the blockchain; we store it to match your payment to your order and as our accounting record.
  • The country derived from your IP address at the moment of ordering and paying, and the IP address itself in the server logs (90 days).
  • The result of the automated blessing review (approved/rejected/pending and the reason).

When you email us

  • Your email address and what you write. Kept as long as needed to deal with the matter, then up to 3 years in case it comes up again.

We do not ask for and do not want: your real name (a nickname is fine), your address, your phone, your date of birth, your card or bank details. We never see card numbers because we do not take cards.

3. What we use it for, and why we are allowed to

  • To deliver what you bought (card, board entry, slogan): we need the order data, the payment reference and your name/blessing. Legal basis: performing our contract with you.
  • To show the public board: your name, blessing, hearts, country and date are displayed. Legal basis: the contract with you (public display is the product) and our legitimate interest in running a public leaderboard.
  • To review blessings: automated review of the blessing text, so the site stays "blessings only". Legal basis: legitimate interest (a safe site) and the contract.
  • To apply sanctions and tax rules: the IP-derived country tells us whether we may sell to you and which VAT or sales tax applies. Legal basis: legal obligation.
  • To keep the site working and safe: logs for debugging, abuse detection and security. Legal basis: legitimate interest.
  • To keep accounts and tax records: order and payment data. Legal basis: legal obligation.
  • To answer you: when you write to us. Legal basis: legitimate interest / contract.

We do not use your data for advertising, we do not build profiles, and we do not sell or share it with data brokers.

4. What is public

The following are shown publicly on the site, in share images and cards, in feeds, and may be indexed by search engines: your name or nickname, your blessing (if approved), the country, the number of hearts and the date. If your gift is the biggest of the month it is highlighted as the country's slogan, and the biggest of all time appears in the hall of fame. We may also quote these in our own posts about the site.

We do not publish your IP address, your country of origin, your wallet address or your transaction hash.

Think before using a full real name: once something is public, other people can copy it before you ask us to remove it.

5. Who else sees the data (processors)

  • Amazon Web Services (hosting, in the us-east-1 region, USA): all site data is stored there.
  • Google (Gemini API): the blessing text and the name of the country are sent for automated review. Your name, IP and payment data are not sent.
  • Public blockchain data providers (RPC nodes and explorers): to detect payments we ask them about transactions to our addresses. We do not send them anything about you.
  • Email: messages you send us pass through our email provider.

We only use providers that agree to process data on our instructions and to keep it secure. Our servers are in the United States. If you are in the EU, UK or Switzerland, your data is transferred to the US: this is necessary to perform the contract you asked for, and our main providers (AWS, Google) offer the standard safeguards required by EU/UK law for the processing they do for us.

6. How long we keep it

  • Order and payment records (including the name and blessing attached to the order): 7 years after the order, for tax and accounting law.
  • Server logs with IP addresses: 90 days.
  • Blessing review results: with the order.
  • Email: see section 2.
  • Backups: removed from backups within 90 days of deletion from the live system.
  • Public display of your name and blessing: until you ask us to remove them, or until we remove them.

7. Your rights

Wherever you live, you can email hello@all-ways-up.com and we will:

  • Remove your name and blessing from public display. Your hearts stay in the country's count as an anonymous entry ("anonymous · 20 hearts"). The order and payment record stays in our books for the 7-year period, but is no longer public.
  • Tell you what data we hold about your order (give us the order id or transaction hash so we can find it: we have no accounts, so that is the only key).
  • Correct a wrong name or blessing (subject to review of the new text).

If you are in the EU, EEA, UK or Switzerland you also have the rights under the GDPR / UK GDPR to access, rectify and erase your data, to restrict or object to processing based on legitimate interests, to data portability, and to complain to your local data protection authority. We will answer within one month. We cannot erase data that we must keep by law (tax records) or that lives on a public blockchain, which we do not control. The blessing review is automated; if you disagree with a rejection, a person will look at it when you appeal.

If you are in California: we do not sell or share personal information, we do not use it for cross-context behavioural advertising, and we are currently below the thresholds that make the CCPA apply to a business. We honour access, deletion and correction requests from anyone anyway.

Israel: residents of Israel have the rights of access and correction under the Protection of Privacy Law; the same email works.

We may ask you to prove you placed the order (for example by signing a message from the paying wallet, or by sending from the email you used before).

8. Children

The site is for adults. You must be 18 or older to send hearts. We do not knowingly collect data from anyone under 13, and if we learn that we have, we delete it. If you think a child has used the site, email us.

9. Security

The site runs over HTTPS. We keep as little data as possible, store it in one place, restrict access to it, and never hold payment credentials: our servers only know our public receiving addresses, never private keys. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

10. Automated decisions

The only automated decision on the site is the review of blessings (approve / reject / hold). It has no legal effect on you: your hearts count either way and only the display of the text is affected. You can always ask for a human review by email.

11. Changes

If we change this policy in a material way we will update the date at the top. Keep using the site after a change and the new version applies.

12. Contact

All Ways Up Technologies LLC · 30 N Gould St, Ste N, Sheridan, WY 82801, USA · hello@all-ways-up.com