Privacy policy

This policy explains what information rafsanjanirupok.com collects when you read the site, create an account, join a discussion or send a message, and what happens to it. For any privacy question, email [email protected].

Information we collect

• Member accounts: your display name, email address, a securely hashed password, verification and account status, signup date, and the version and time of the agreement you accepted. Your password is never stored in readable form.
• Comments: the text, author account, article, posting time and moderation status.
• Contact messages: the name, email address, subject and message you submit.

What other visitors can see

Your display name, visible comments and replies, and their dates are public. Your email address is not shown with comments. Please do not post private information about yourself or anyone else. Administrators can access account and moderation records to run the site.

Cookies and browser storage

• Session cookie: required for signing in and for protecting forms.
• Reader cookie: lasts up to one year and stops repeat visits from inflating view counts. The database stores a keyed hash of this random identifier, and of member identifiers for signed-in readers, not a browser fingerprint.
• Theme preference: your light or dark choice may be saved in your browser’s local storage.

View counts are approximate. Clearing cookies or changing browser can change how an anonymous reader is counted. The site has no advertising and no third-party analytics.

Security and abuse prevention

Short-lived keyed hashes derived from IP addresses or account identifiers are used to limit abuse of sign-in, signup, password reset and commenting. These records expire and are removed during later requests. The web host may separately keep access and error logs, which include IP addresses.

We use password hashing, verification links, access controls and protected forms, but no online service can promise absolute security.

How we use information

We use this information to provide accounts, verify email addresses, reset passwords, display and moderate discussions, count readers, answer messages and prevent abuse. Signing up does not subscribe you to marketing. Account emails are only for verification and password recovery. We do not sell your information.

Services and external content

The website and mailbox are hosted by Namecheap, which processes the information needed to run the service and deliver account emails.

Some pages load photographs and book covers from other services, including Wikimedia Commons and online bookshops. Those services can receive your IP address and browser details when an image loads. Linked websites have their own policies.

How long information is kept

• Account and agreement records stay for as long as they are needed to run the membership or handle security and support.
• Verification links expire after 24 hours and password-reset links after one hour. Expired token records are removed during later token requests.
• Reader hashes stay with an article so that readers are not counted twice.
• Contact messages and hidden moderation records are kept until an administrator removes them.
• Backups and provider logs may keep copies until their normal rotation completes.

Your choices

You can remove your own comments while signed in. The text is erased, and a placeholder stays to keep replies in context. You can also email us to request access to, correction of or deletion of your account information. We may need to verify that the account is yours, and we will explain if anything has to be kept.

Children

Membership is for adults aged 18 and over. If you believe a child has created an account, please contact us.

Changes to this policy

Material changes will be posted on this page with a new date.