Privacy — رازداریِ دفترچه

Daftarche does not track you. There is no outside analytics, no advertising, no tracking pixel and no social button anywhere here, and nothing on any برگ is loaded from any machine but this one. No data about you is sold, rented or handed to anybody. What is kept is what a forum needs in order to work, and clause 3 lists it.

• One cookie — and only once you have signed in. It carries a session token and nothing else: not your name, not your account number. Your browser sends it to no other site, script on the برگ cannot read it, and it lasts sixty days unless you sign out first.
• A few keys in this browser's own store — the پوسته you chose, the last time you visited, the واکنش you have reached for lately, and the fact that the notice about this has been dismissed. If you are not signed in, how far you have read into each جستار is kept here too. If you are signed in it is kept on the server instead and never written to this machine, so that what a member has been reading is not left behind on a shared computer.
• The key to your نامه‌ها — in this browser's database and nowhere else. It is held in a form that cannot be read back out as bytes by anything running on the برگ, and signing out deletes it.
• What you have written and not sent — a پاسخ half typed, an edit you did not finish, a جستار you have not started yet. It is written here as you type, so that a reload or a phone reclaiming the tab does not lose it, and a sealed copy goes to the forum a couple of seconds later so that it is there on your other machine. Signing out deletes this machine's copy. پیش‌نویس‌ها is where you throw any of them away for good.

You can clear all of it from your browser whenever you like. Clearing it destroys nothing you have written; it signs you out and forgets this machine's settings.

• The name you chose, and what you have written under it.
• Your نمایه as you filled it in — the چهره, the زیستنامه, the زیرنویس, where you say you are, and the handles you added. All of it is printed for anybody to read, which is what a نمایه is for. So are the settings you chose, which are kept so they follow you from one machine to the next.
• An email address, if you gave one. It is optional, you may take it off at any moment, and it is stored sealed under a key that lives in the machine's environment and not in the database; it can be looked up only through a keyed hash of it. Its one use is getting back into your account, and the only message this forum ever sends is a link you asked for. A گرداننده can see whether you have an address and can never see what it is.
• The last time you were seen, and how far you have read into each جستار — which is the dateline of the newest پیک you reached, never the moment you reached it.
• Which members have opened your نمایه, and how many visits it has had altogether. There is one row per pair of people rather than one per visit, so it cannot be read as a timeline of who was following whom, and the names are shown to you and to nobody else.
• Your sign-in sessions, each as a hash of its token, with when it began and when it was last used. No address and no browser name are kept beside them: you pick a session to revoke by when it started, which is all this forum is willing to know about it.
• The public half of your key, which is printed on your نمایه on purpose, and the private half sealed under a key made from your password.
• Any act of office taken on your شناسه — a ban, a پیک removed — with who did it and why. Every officer can read that log, which is the point of it: a گرداننده who can act unobserved is a گرداننده whose شناسه is worth stealing.
• Your پیش‌نویس‌ها — what you have written and not sent — sealed in your browser under the same key as your نامه‌ها. What sits here is ciphertext and a number: this forum cannot say which جستار a draft belongs to, when it was written or what it says. It knows that you have some, and how many.

This is the most important clause on the برگ, because what is not kept is what can never be taken from Daftarche.

• Your internet address. There is no column for it anywhere in the database — not at registration, not when you write, not when you sign in. To hold off abuse a hash of it is kept in memory alone, under a key made when the forum starts, thrown away every hour and never written down; that hash cannot be turned back into an address. The forum's own software writes no request log.
• The name of your browser and your device. It is read on the way past to tell a crawler from a reader, and then dropped. Nothing keeps it.
• Your birthday, your telephone number, your messenger handles. The forum before this one stored all of them; the importer dropped every one of them on the floor.
• When you were reading. The mark clause 3 describes is the dateline of the newest پیک you reached and carries no moment of its own, so nothing here can be read as a record of one person's evening. A بازدید count says how many opened a جستار and names nobody. Somebody reading without signing in leaves nothing at all.

Wherever Daftarche says when somebody was here — on «رفت‌وآمدِ امروز», beside a name, or on a نمایه — the time is rounded down to the half hour it fell in, and the names are ordered by that half hour rather than by the second behind it. The reason is plain: the exact times a person arrives and leaves are their sleeping and working hours, and that pattern is the kind of thing that can place somebody.

The rounding is a promise about what is published and not about what is stored. The column holds the second. A stolen dump is therefore finer than any screen here is, and saying so is worth more than a claim that would not survive being checked.

That list is public. Anybody at all — a member, or a stranger who has never signed in — can see who has been here in the last day, so being on the forum is visible for a day after each visit whether you write anything or not. A second list says who has been here in the last thirty days, and that one is shown to members only. The rounding is the same and the names are the same; what differs is who may read it. A day's list answers whether the room is empty, which is a fair thing for somebody deciding whether to join to want to know. A month's answers who is still coming and who has stopped — a question about people rather than about the forum, and one a stranger with no name and nothing at stake should not be able to ask thirty days at a time. Nothing further is kept in order to draw it: the column holds one moment per member, the last time they were seen, so a month's list is one visit each and never a record of habit. While you have a جستار open your name is also shown to the other members reading the same جستار; that is held in memory for a few minutes, is written down nowhere, and is forgotten when the forum restarts.

A پیک's own clock is exact and is not rounded. Its writer put it in a public room themselves, and telling somebody who has just written that it was «۲۹ دقیقه پیش» is only confusing. An act of office is rounded, because that is when a گرداننده was at their desk.

نامه‌ها are end-to-end encrypted. They are sealed and opened in your browser under a key made from your password, which the server never holds — so it cannot read them, not now and not if the machine it runs on ever falls into somebody else's hands. That holds for every نامه between two members who each already have a key of their own — which is not yet everybody, and until it is, the exception below applies. The table they sit in has no sender, no recipient, no subject, no body and no timestamp: all of that is inside the ciphertext, so who wrote to whom does not come off a stolen copy of the database. What such a copy does show is how many letters each mailbox holds.

One exception, said plainly because it is real and because it is not small. Everyone who has not signed in since keys existed is in it, and most of the members carried over from the old forum have not. It is not a rare corner today, and it closes one member at a time — the first time each of them signs in, and never by anything this forum does on its own. A نامه written to a member who has no key yet — the six thousand carried over from the old forum, and anything sent to somebody who has not signed in since keys existed — is sealed under the server's own key until that member next signs in, and is moved onto theirs the moment they do. Until then this machine can open it, and the screen you write it on says so before you send it.

The price of the rest is that if you lose your password your نامه‌ها are lost. Nobody can bring them back.

Nobody. Daftarche does not sell, rent or hand any data about you to anyone. What you write in the public rooms is of course public and anyone may read it — that is not data being shared, it is the forum itself.

• Posts for as long as the forum is here; archiving them is part of what it is.
• Sessions until you sign out or until they run out, which is sixty days after they began.
• Password recovery links are short-lived and good for one use: an hour for a reset, a day for confirming an address.
• An account that is closed stops being shown; what it wrote in public conversations stays — see clause 4 of the terms.

Much of it you can do yourself in your settings: take your email address off, change your نمایه, end any session on any device. Beyond that you may ask to be told what is held about you, to have it corrected, or to have your account closed. Write to the address in clause 13 and it is done.

Closing an account erases everything you supplied — the address, the keys, the نامه‌ها, the نمایه, the sessions, the backup codes, the سپاس, the read marks, the record of whose نمایه you looked at. Your name and what you wrote in public conversations stay, because sixteen years of conversation belong to everyone who spoke in them.

None of this is dressed up as a right granted by any particular law. It is what this forum does when you ask.

Daftarche is for adults and knowingly keeps no data about anybody under 18. If we learn that an account belongs to someone younger, it is closed.

Your password does not reach the server. Your browser turns it into keys and sends only the half that proves who you are; the half that opens your نامه‌ها never leaves the machine you typed it on. One exception is still open, and it is the same set of people as in clause 6: a member who has not signed in here since this was built sends their password once, on that last old-style sign-in, which is what moves them across. Your email address is stored sealed.

All the same, no system is unbreakable, and whoever takes a server entirely reaches what is on it — except the نامه‌ها, whose key is not there. And the software doing that sealing is served by the same machine: this closes the gap between a stolen disk and a seized machine, and it cannot close the gap between a reader and the forum serving them the page. Saying that is clearer than pretending otherwise.

This برگ changes with the software. If what is kept changes, it is written here.

contact@daftarche.com

Members can also write to a moderator through the forum. Anyone else — and anyone who has closed their account — should use the address above, which is read by the people who run Daftarche.

See also the terms.