Boots and Hearts Powered by loyalink

Unlock access to your favorite artists

Choose your festival

Your weekend is over.
Your access isn't.

Follow the artists you actually came for. Every follow puts points on the board, and there is more waiting behind each one.

Who did you catch?

Privacy Policy

Last updated September 4, 2026

Loyalink runs this rewards program. This page says what we collect, why, who else touches it, and how to get it back or get rid of it.

What we collect

What you give us. Your name, email address and mobile number, the artists and brands you pick, and on a tour the night you are attending. If you claim access at a show, your Instagram handle and, if you give it, your seat location.

What using it creates. Which actions you complete, whether each one passed, the verifier's one line reason and its confidence score, and the points you hold.

Checking in at a show. If you tap Check in, your browser asks whether to share your location. If you allow it, your device sends us a reading once, we compare it to the venue for the night you picked, and we keep only whether it matched. We do not store where you were, and we never track you in the background. Declining costs you the points for that action and nothing else.

What we record automatically. How you arrived, including campaign tags on the link (source, medium, campaign and the rest of the Google Analytics UTM set), a QR code tag naming where it was placed, your browser's user agent string, and the pages and actions you take.

What stays on your device. Your points, picks and progress sit in your browser's local storage so the app still knows you between visits. The first campaign tags that brought you here stay there too, so a later visit still belongs to that arrival.

Analytics. Google Analytics (property G-TPG28RZL61) runs on this site. The page loads a script from Google. Google records the pages you open, the actions you complete (which artist or brand, which earn, whether proof passed, points and tier), the campaign tags on the link that brought you, your IP address, and a cookie that tells them you came back. We use that to see how people move through the program and which campaigns they came from. Your name, email and phone are not sent to Google.

Screenshots

Some actions ask for a screenshot as proof. When you upload one, it is sent to Anthropic's API and checked against that action's stated criteria.

The image is not kept. We store the verdict, the short reason and a confidence score. The screenshot itself is never written to our database, which means we cannot show it to anyone later, and neither can Anthropic.

Why we use it

  • To run the program and keep your points attached to you
  • To email you a six digit code when you sign back in
  • To check the proof you submit
  • To tell you when an artist or brand you follow has something for you, and only if you ticked that box
  • To see how people use the program and which campaigns they arrived from

Only the messages from artists and brands need your permission. The program works whether or not you give it. Analytics loads with the page. There is no separate yes.

Who else processes it

Supabase holds the database. Netlify hosts the site. Anthropic checks the screenshots. Resend delivers the email. Google Analytics records how the site is used. All of them process data in the United States, so your information is stored there and is subject to the laws of that country, including lawful access by United States authorities.

We do not sell your information. We do not hand it to the festival, the artists or the brands as personal information. What they see is counts and totals. The one exception is an access reward at a show: if you claim one, your name, Instagram handle, mobile number and seat location are shared with the tour's team so they can find you, verify you and review who is coming into the area. Your ID is inspected at the venue, not photographed or stored by us.

How long we keep it

Twenty four months after your last activity, then it is deleted. The verdicts attached to you are deleted with you.

Your choices

  • Stop the emails. The unsubscribe link in any of them, or write to us.
  • Stop the texts. Reply STOP.
  • See what we hold, correct it, or have it deleted. Write to us.
  • Clear this device. Sign out from the menu.
  • Analytics. It loads with the page. A content blocker or a browser setting that blocks tracking, including Google Analytics, will stop it. Write to us if you want the record deleted.

Asking for deletion ends the program for you, because the points are the record.

Your rights under PIPEDA

You can ask for the personal information we hold about you, ask us to correct it, and withdraw your consent. We answer within thirty days. If our answer does not satisfy you, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

If you are in the United States

You can ask what personal information we hold about you, ask us to correct or delete it, and we do not sell or share your personal information. Write to the address below; we answer within thirty days. Nevada residents may direct a do not sell request to the same address.

Age

This program is not directed at children. A page for an alcohol brand asks your age before it opens: nineteen in Ontario, eighteen in Alberta. Access rewards at a show are for people 18 or older; we ask you to confirm that when you claim, and the venue checks ID.

Changes

Any change is dated at the top of this page.

Contact

info@loyalink.com

Terms

Last updated September 4, 2026

Who runs this

Loyalink operates this program and runs the points and the claims. The festival, the artists and the brands shown here are not the operator and are not responsible for it. Nothing here is an offer from them unless it says so on their page. Access rewards at a show, such as the Take You Down experience and riser access on The R&B Tour, are provided by the tour and are subject to the artist's and the venue's decisions on the night.

Points

Points are a measure of standing inside this program and nothing more. They have no cash or monetary value, they cannot be sold, transferred or exchanged for money, and they are not property. They exist only inside this program and can only be used toward the rewards shown here. We can change how points are earned and what they unlock, and we can correct a balance that was awarded in error. Points do not expire while your account is active; an account inactive for twenty four months is deleted with its points. Every tier can be reached without buying anything.

Verification

Actions are checked automatically against the screenshot you submit. We can decline proof that is unreadable, edited, a photograph of another screen, or not yours. Points awarded on proof later found to be false can be taken back.

Rewards

Rewards depend on availability and on the artist or brand providing them. Where something is limited we say so on the page. We can change or withdraw a reward, and we will tell you before doing it to a tier you have already reached.

Some rewards are limited in quantity and are claimed first come within a window we announce. A claim can require a stated tier, and each person can claim a given reward once. Claims are ordered by the time our server receives them. On The R&B Tour you may hold one access claim across the whole tour (the Take You Down experience or the riser upgrade, not both, at one show) and one merch piece claim across the tour; a standby place counts as your claim. Where access to something is decided by points, the ranking and the cutoff time are stated on the page, and standing at that time is what counts.

Rewards at a show

Some rewards are access at a show: the Take You Down experience, riser access and merch pieces on The R&B Tour. For these, the window opens at a time posted on the page in the venue's local time, you must be signed in here when it opens, and the first to claim get it. You must hold a valid ticket to that night; the reward does not include a ticket, and it is only usable at the show you picked. To use access you must be 18 or older, show government issued photo ID that matches the name on your account, and sign the tour's confidentiality agreement at the venue. Staff reach you at the mobile number on your account; if they cannot reach you or you decline any of these conditions, the spot passes to the next person on the standby list. Where a claim covers a guest, the guest must arrive with you, hold their own ticket, be 18 or older, and meet the same conditions; guest spots cannot be transferred or sold. What happens inside an access area, including who if anyone joins the artist on stage, is decided by the artist and is not a term of this program. By claiming, you agree that you and your guest may be photographed and recorded at the show and that the tour may use that footage.

Posts that earn points must be your own and truthful, and you should say in them that you earn rewards for posting. This program is not sponsored, endorsed, administered by or associated with Instagram, Meta, TikTok, Apple, Spotify or Ticketmaster.

Brand offers

Offers on brand pages belong to those brands and run on their terms, at their retail, in the places they name. We link to what they publish. We do not control it, and it can change or end without notice to us.

Fair use

Do not submit proof that is not yours, do not automate the program, and do not sign up anyone who did not ask to be signed up.

Ending it

You can leave at any time by asking us to delete your record. We can close an account that breaks these terms.

Changes

Any change is dated at the top of this page.

Contact

info@loyalink.com

Brands at the festival
A Loyalink program. Rewards are provided by Loyalink.

Build notes

Not part of the fan experience. This panel is here so the engineering team can see the data model and the verification contract behind what they just clicked through.

An artist is configuration, not code
{
  slug:  "rascal-flatts",
  name:  "Rascal Flatts",
  day:   "Sunday",
  badge: "Main Stage Headliner",
  hook:  "Earn a pass to Boots and Hearts 2027",  // the one line on the tile
  ladder:"headliner"                   // or a bespoke tier array
}
A ladder is thresholds and rewards
[ { at: 1800, reward:"15% off tour merch" },
  { at: 3200, reward:"Presale access, 24 hours early" },
  { at: 5000, reward:"VIP upgrade at Boots and Hearts 2027" } ]

The five self serve actions total 1,500 against a first rung of
1,800. A fan who does everything lands at 83% and redeems
nothing. Only "be there for the next show" (+600) crosses it.
An earn action carries its own proof rule
{
  id:       "ig-follow",
  pts:      100,
  label:    "Follow them on Instagram",
  proof:    "Screenshot their profile showing Following",
  criteria: "The screenshot shows an Instagram profile for
             {artist}. The follow button reads Following or
             Message, not Follow."
}
Verification contract
POST /api/verify
  { actionId, artistName, criteria, image, mediaType }
→ { pass: boolean, reason: string, confidence: number }

Server side only. claude-haiku-4-5 with vision, structured
output forced through tool use. The key never reaches the
browser. reason is shown to the fan verbatim.
checking verifier...
Sponsor coverage

Fans see "Coming soon" on an empty brand. Internally the split is the point: this is how much of the festival's own sponsor roster has nothing for the people standing in front of it.

Honest about the seams

Screenshot proof is defeatable: follow, screenshot, unfollow. The durable fix is platform OAuth, which Loyalink already does for Instagram on the Hideout flow. Photo proof is the pattern for the actions no API will ever expose, and it is what makes a ladder possible on day one instead of next quarter. Progress belongs to the account now, not the browser: an httpOnly session cookie carries it, and moving to a new device means signing in.

Demo controls