The tier list: how Facebook decides which countries need protection