Last updated: 26 August 2026
This notice explains how the Government of Links Land handles personal information through govll.org. Individual services may provide an additional notice when they collect information for a particular purpose.
Who is responsible for your information
The data controller is Sam, operating the Government of Links Land website (govll.org). Questions, requests and complaints may be sent to info@govll.org.
Information we collect
- Website, statistics and security information: internet protocol (IP) address, date and time, requested host and page, request method, response status and size, browser or device user-agent information, referring page, and diagnostic or security events. Approximate country, browser type, activity periods, popular pages, referring domains and pseudonymous visitor totals may be derived from this information.
- Information you provide: messages, forms, applications, documents and contact details you choose to submit.
- CMS account information: name, username, email address, role, account status and security or editorial audit records.
- Special-category or sensitive information: only where a service genuinely requires it and explains the reason at the point of collection.
Why we use it and our lawful basis
- To deliver pages, keep the website secure, prevent abuse, diagnose faults and produce aggregate statistics that help us understand demand and improve Government services. We rely on our legitimate interests in operating a secure and effective public website and, where applicable, legal obligations.
- To answer enquiries and provide a service you request. Depending on the service, this is necessary to take steps at your request, comply with law, or pursue our legitimate interests in government administration.
- To administer staff accounts and maintain reliable public records. We rely on legitimate interests and applicable legal or public-record obligations.
- Where processing is genuinely optional, we will ask for consent. You may withdraw that consent at any time without affecting earlier lawful processing.
If providing information is required by law or necessary for a requested service, the relevant form will explain this and what may happen if it is not provided.
Cookies and browser storage
We use only strictly necessary cookies and local browser storage on this website. We do not use advertising or audience-analytics cookies. Our aggregate website statistics are produced from ordinary server request logs, not from a tracking cookie. See the cookie notice for the current item-by-item list, purposes and durations.
Website statistics and stats.govll.org
Requests to govll.org are recorded in the Government web server's access logs. The Royal Office of Digital Infrastructure (RODI) processes those logs on the Government's behalf using GoAccess and displays the resulting operational summaries on the restricted stats.govll.org service. The statistics help authorised personnel understand demand, prioritise improvements, diagnose errors and identify security or availability problems.
The processing includes the request information described above. A locally held GeoIP database may derive an approximate country from an IP address; this is country-level estimation, not precise location tracking. Known automated crawlers, scanners and uptime tools are filtered where identifiable, although no filter is perfect. The dashboard combines request records into aggregate figures rather than presenting named visitor profiles. It is not designed to identify or follow individual visitors, and the aggregated dashboard cannot normally be used to retrieve a person’s browsing history. Raw request logs remain confidential and may be accessed only by authorised RODI personnel or system administrators when genuinely necessary for security, fault investigation or a legal obligation; they are normally deleted after 14 days.
Access to stats.govll.org is restricted by an authorised account, password and second authentication factor. The statistics service does not use advertising pixels, cross-site marketing identifiers or automated decision-making about visitors. Its own authentication cookies apply only when an authorised user signs in to that separate service.
Who receives information
Access is limited to authorised government personnel, including RODI personnel responsible for digital infrastructure and statistics, and suppliers that need information to provide or secure the service. These may include Oxide for server hosting, Cloudflare for content delivery and security, and Fastmail or another configured mail provider for email delivery. We may also disclose information where lawfully required to a court, regulator, law-enforcement body or other competent authority. We do not sell personal information.
Some government email addresses, including info@govll.org, are monitored and responded to by more than one authorised person acting on behalf of the Government of Links Land and under its instructions. They do not use this information for their own separate purposes. The Government of Links Land remains the data controller for this information.
Controlled use of AI systems
OpenAI services and Anthropic's Claude may be given access to information held in Government databases when their use is necessary for an approved task. They do not have standing or unrestricted access. Access may occur only after explicit approval by an authorised Government official and only within a controlled environment configured to limit access to the minimum information necessary.
Any approved use must be supervised, time-limited where practicable, subject to access controls and logging, and carried out in accordance with confidentiality, security, retention and data-protection requirements. Database information must not be used for unrelated purposes, and access must be withdrawn when the approved task ends.
International processing
Internet, hosting, security and email providers may process information in more than one country. Where data-protection law requires safeguards for an international transfer, we will use an applicable adequacy decision, contractual safeguards or another lawful transfer mechanism. Contact us for information about safeguards relevant to a particular service.
How long we keep information
- Raw Nginx web access logs used for security and statistics are normally rotated daily and kept for up to 14 days, but may be retained longer when needed to investigate an incident or meet a legal requirement.
- Aggregated GoAccess statistics may be kept while useful for service trend analysis and can be reset when no longer required. Aggregate reports may cover the period since the statistics service was introduced.
- General enquiries are normally kept for up to 12 months after the matter is resolved.
- CMS account records are normally kept while the account is active and for up to 90 days after closure; necessary security and editorial audit records may be kept for up to 12 months.
- Applications, statutory records and service-specific information follow the retention period stated by that service or required by applicable law.
Backups are protected and deleted through their normal secure rotation. We may retain information longer where litigation, an investigation, archiving in the public interest or another legal obligation requires it.
Your rights
Depending on where you live and the lawful basis used, you may have rights to:
- ask for access to your personal information and a copy of it;
- correct inaccurate or incomplete information;
- request deletion or restriction of processing;
- object to processing based on legitimate interests;
- receive certain information in a portable format;
- withdraw consent at any time; and
- complain to the supervisory authority where you live or work.
To exercise a right, email info@govll.org. We may need to verify your identity. These rights can have lawful exceptions. People in the United Kingdom may also complain to the Information Commissioner's Office; people in the European Economic Area may contact their national data-protection authority.
Automated decisions and children
The main govll.org website does not make decisions about people using solely automated processing.
Security
We use access controls, encrypted connections, limited administrative access, security monitoring and backups to protect information. No internet service can promise absolute security. Please do not send passwords or unnecessary sensitive information by ordinary email.
Children
This website is not directed at children under 13, and we do not knowingly collect personal information from anyone under that age. Anyone submitting a form or application confirms they are 13 or older.
On submission, the applicant automatically receives one confirmation email acknowledging that the application has been received. A further automated email may be sent if the application is later removed or withdrawn. These are transactional emails necessary to administer the application, not marketing communications.
If we discover that personal information has been submitted by someone under 13, we will not send any further correspondence beyond the automatic confirmation already generated, and we will delete the information as soon as reasonably practicable. A parent or guardian who believes their child under 13 has submitted information to us can contact info@govll.org and we will investigate and delete it promptly.
External websites
Links to another domain are covered by that website's privacy notice. Our external-link warning distinguishes other government-managed govll.org services from websites we do not manage.
Changes to this notice
We will update this page when our processing changes. Material changes will be identified by a new “last updated” date and, where appropriate, an additional notice.
Citizenship applications
The citizenship application collects the applicant's Links Land legal name, actual date of birth, email address, optional Discord and Roblox usernames, country, country of residence, previous micronational involvement, application answers, declarations and a drawn signature. Limited security information, including a protected hash derived from the submitting IP address and browser information, is retained to prevent abuse and investigate submission problems.
Purpose and lawful basis
We use this information only to receive, assess, administer and keep an accountable record of citizenship applications; communicate with applicants; prevent duplicate or abusive submissions; and maintain the citizenship record if an application succeeds. Depending on the applicable jurisdiction and stage of the process, this is based on steps taken at the applicant's request, the Government's legitimate interests in operating this website and its services, legitimate interests in operating a fair and secure application process, and applicable record-keeping obligations. The declaration and signature do not amount to consent for unrelated uses.
Drawn signatures
The signature image records the applicant's intention to make the declaration shown on the form. We do not analyse handwriting, create a biometric template, compare the signature with another sample, use it for automated recognition or use it to authenticate the applicant's identity. If that purpose ever changes, we will carry out a separate legal and risk assessment and provide new information before that processing begins.
Applicants aged 13 to 17
Applicants must be at least 13. The under-13 policy in the Children section above applies to this application as it does to the rest of the website. Younger applicants aged 13 to 17 may still benefit from reviewing the application with a parent, guardian or trusted adult before submitting it, and we apply the same protective defaults to every applicant regardless of age. We do not use application data for advertising or profiling, and we do not publish application answers. A parent or guardian may contact us about a younger applicant's data-protection rights where legally appropriate.
Access, sharing and decisions
Applications and signatures are not public. Access is limited to authorised officials and the hosting, security and email providers described elsewhere in this notice where they need access to operate the service. Information may also be disclosed where lawfully required. Citizenship decisions are not made solely by automated processing.
Retention and applicant choices
Unsuccessful or withdrawn application answers and signatures are normally retained for up to 12 months after the decision so that the process can be administered, reviewed and defended against error or abuse. For a successful application, the minimum core citizenship record may be retained while citizenship continues and where required for official records. Supporting answers and the drawn signature should be reviewed after the decision and deleted when they are no longer necessary. An applicant may ask to correct information or withdraw an undecided application by emailing info@govll.org, quoting the submission reference. Withdrawal does not require deletion where a lawful exception or necessary security record applies.