Privacy Policy

This policy explains what information Persian Telebox ("we", "us", the "Site") collects, why we collect it, and what you can do about it. It applies to https://persiantelebox.com and to any page served from it.

We have deliberately designed the Site to collect as little as possible. There are no user accounts, no registration, and no advertising network embedded in our pages.

1. Information you give us

Comments. When you post a comment you supply a display name and the text of your comment. Both are published on the Site once approved. Do not put an email address, phone number, or any other personal detail into either field — anything you type there becomes public.

Ratings. When you rate a title we store the score (0–10) together with a one-way hashed identifier described in Section 2. We do not store which titles a named person has rated, because we do not know who you are.

Your list (favourites). When you save a title or channel to your list, we store the item together with the random browser identifier described in Section 2. That identifier is stored as-is for this purpose — it has to be, so the list can be read back to you — but it is a random value we generated, not derived from your IP address, your device or anything about you. We cannot connect it to a person, and we do not try to. Clearing your browser storage ends the association permanently and leaves the saved rows orphaned; see Section 7.

Correspondence. If you email us, we keep the message and your address for as long as needed to deal with the matter and to keep a record of it.

2. Information collected automatically

Server logs. Our server records the request path, timestamp, HTTP status, referring page, and user-agent string. IP addresses appear in these logs and are retained for no more than 30 days, after which the logs are deleted or truncated.

Abuse-prevention hash. To stop a single visitor from rating the same title repeatedly, flooding the comment form, or inflating a view counter, we compute a keyed one-way hash of your IP address combined with a random identifier stored in your browser. We store the hash, not the IP address, and the hash cannot be reversed to recover it.

Random browser identifier. The random identifier mentioned above is kept in a first-party cookie. It feeds the abuse-prevention hash, and it is also stored directly against the items you save to your list and used to count a view once per visitor per title. It is generated by us at random, contains nothing about you or your device, and is not shared with anyone.

View counts. We count how many times a title, episode or channel is opened, as a daily total per item. We record the totals, not who viewed what: no identifier is stored alongside a view. A repeat view from the same visitor within thirty minutes is not counted twice, and views from automated crawlers are excluded.

Cookies and local storage. We use: - a strictly necessary session cookie for administrators signing in to the dashboard; - a CSRF token cookie protecting form submissions; - a random visitor identifier used solely for the abuse-prevention hash above; - browser local storage on your device to remember playback position, volume, and preferred quality.

We do not use advertising cookies, cross-site trackers, or third-party analytics that build profiles of you. Clearing your browser storage removes the client-side items at any time.

3. What we do not do

• We do not sell, rent, or trade personal information.
• We do not build advertising or behavioural profiles.
• We do not require or ask for your real name.
• We do not knowingly collect information from children under 13.

4. Third parties

Some pages embed or load resources from third-party services — for example a content delivery network that serves images and video, or a casting device on your local network. Those services necessarily see your IP address and user-agent in order to deliver the file, and their own policies apply to that processing. Where playback is served from a third-party source, we do not control what that source records.

Our hosting provider and CDN process data on our behalf under their standard terms.

5. Legal bases and your rights

If you are in the European Economic Area or the United Kingdom, we process the limited data above on the basis of our legitimate interest in operating a functioning, non-abusive website, and on consent where you choose to submit a comment or rating.

You may ask us to delete a comment you posted, or ask what information we hold that relates to you. Because we do not collect identifying information, we may be unable to locate records relating to you unless you can point us to the specific comment or message. You can clear your own saved list at any time from the list page, or by clearing this site's cookies — neither requires asking us. Write to [email protected].

6. Security

Administrator passwords are stored only as Argon2id hashes. Sessions use signed, HTTP-only cookies. Media playback links are short-lived and signed. No system is perfectly secure, and we make no guarantee that transmission over the internet is free from interception.

7. Retention

Comments and ratings are kept while the corresponding title remains on the Site. Saved lists are kept while the saved item remains on the Site; because a list is tied to a browser identifier and not to an account, we have no way to tell that a browser will never return, and rows whose identifier is no longer in use are removed on a periodic clean-up. Daily view totals are aggregate figures with no identifier attached and are kept indefinitely. Server logs are kept as described in Section 2. Administrative audit records are kept for 24 months.

8. Changes

We may revise this policy. Material changes will be reflected in the date shown at the top of this page. Continuing to use the Site after a revision means you accept the revised policy.

9. Contact

Persian Telebox Inc. — [email protected] —