Effective 6 September 2026

Privacy policy

This policy explains how Rafsan Jani Rupok’s website handles information when you read, create an account, contact us, or join a discussion. For privacy questions, contact info@rafsanjanirupok.com.

Information we collect

Member accounts store a display name, email address, securely hashed password, email-verification status, account status, signup date, and the version and time of agreement acceptance. We do not store your account password in readable form. Comments and replies store their text, author account, article, posting time, and moderation status. Contact forms store the details you submit so we can respond.

What other visitors can see

Your display name, visible comments, replies, and their posting dates are public. Your account email is not displayed with comments. Please do not include private information about yourself or others in public discussions. Administrators can access account and moderation records to operate the site.

Sessions, preferences, and view counts

A necessary session cookie supports sign-in and protects forms. Your theme preference may be saved in your browser’s local storage. An article-reader cookie, valid for up to one year, helps prevent repeated refreshes from increasing view counts. The database stores keyed hashes of that random identifier, and of member identifiers for signed-in deduplication, rather than a browser fingerprint. View counts represent deduplicated readers, not verified individual people. Clearing cookies or using another browser can change anonymous counting.

Short-lived keyed hashes derived from IP addresses or account identifiers are used to limit login, signup, reset, and commenting abuse. These rate-limit records expire and are removed during subsequent requests. The web host may separately retain access and error logs, including IP addresses.

Why we use information

We use this information to provide accounts, verify email ownership, reset passwords, display and moderate discussions, count readership, answer messages, and prevent abuse. Signup does not subscribe you to marketing messages. Account emails are for verification and password recovery.

Email, hosting, and external content

The website and mailbox providers process information needed to host the service and deliver account emails. Email is sent through the configured Namecheap-hosted mailbox. Public pages may load photographs or covers from external image hosts; those hosts can receive your IP address and browser request information when an image loads. Linked websites apply their own policies. We do not sell account information.

Retention and your choices

Account and agreement records remain while needed to operate the membership or handle legitimate security and support needs. Verification links expire after 24 hours and password-reset links after one hour; expired token records are removed on subsequent token requests. Reader hashes remain with an article to preserve deduplication. Contact messages and hidden moderation records are retained until the administrator removes them when no longer needed.

You can remove your own comments while signed in; their body text is erased, with a placeholder left to preserve reply context. You may request access, correction, or deletion of account information by emailing us. We may need to verify account ownership first. Backups and provider logs may retain copies until their normal rotation completes. We will explain any specific information that must be retained when responding to a request.

Security and policy updates

We use password hashing, verification links, access controls, and protected forms. No online service can promise absolute security. The membership is intended for adults aged 18 and over. If you believe a child has created an account, please contact us. Material changes to this policy will be posted here with a new effective date.