Who runs this site
The Heaven Prompt is run by one private individual, not a company or organisation. You can reach them at [email protected].
When you say yes
We store the date and time, and the country you choose if you choose one. Your name is never sent to us. It stays in your browser and is only used to draw your card.
Your browser also keeps a random code that lets you take your yes back later. We store only a scrambled (hashed) form of that code, which cannot be traced back to you.
To stop one person or program flooding the count, we also store a salted hash of your network address, never the address itself. The hash changes every day, we use it only to limit repeat submissions, and we delete it after 30 days. After that, a yes holds no name, no contact details and nothing that links it to you.
When you add a heaven
We store the text you write, the name or initials you sign with (if any), the country you choose (if any), the date and time, and the same short-lived hash of your network address.
A person reads each heaven before it appears. Approved heavens are shown publicly on this site, and anyone can share them. Please leave out anyone’s full name, address or contact details. Heavens that include them are not published. Heavens we do not publish are deleted 30 days after they are reviewed.
If you choose “Just make my card”, nothing is sent to us at all. The card is drawn on your device.
If the page spots words about wanting to die or self-harm in what you write, it is not sent to us and no card is made. The page points you to free, confidential support instead.
What we do not do
- No advertising.
- No tracking cookies and no analytics.
- We never sell or share your information.
If that ever changes, this page will say so before it happens.
Why we are allowed to keep it
Your yes and your heaven are kept because you chose to send them (your consent), and you can withdraw that at any time: take back your yes on the page where you gave it, or ask us to delete a heaven. The network hash is kept for a legitimate interest: stopping spam and keeping the count honest.
Other companies involved
The site is hosted on Cloudflare, which handles every request in order to deliver the site and keep it secure. Fonts are served from this site, not from Google. The human check against bots is Cloudflare Turnstile, which checks your browser without tracking cookies. The share buttons only contact another site if you click one.
In your browser
We keep a few things in your browser’s local storage: that you said yes, the name and country on your card, the code to take your yes back, and any heaven you added, so the page can show them to you again. Clearing your browser’s data for this site removes them.
Removing your data, and your rights
To have a heaven removed, or to ask what we hold, email [email protected] with the text or the date you sent it. We will delete it. To take back a yes, use “Take back my yes” on the home page in the same browser.
You also have the right to complain to your local data protection authority. In Australia that is the Office of the Australian Information Commissioner (oaic.gov.au). In the UK it is the Information Commissioner’s Office (ico.org.uk).
Children
This site is not aimed at children under 13, and we do not knowingly collect anything from them.
Changes
If this policy changes, the date at the top will change too.