This policy covers namafar.com, the English and Arabic edition of Namafar. The site is run by Namafar Center for Data Mining and Policy Research, Taleghani St, Felestin Sq, Tehran, Iran (“Namafar”, “we”). Questions and requests: info@namafar.com.
1. Reading the site
You can read charts, analysis and publications without an account. We do not use advertising or third-party tracking, and our own visit statistics work without cookies. They do not store your IP address: to count daily unique visitors we keep a one-way hash of your IP address and browser with a random key that changes every day, and both the key and the hashes are deleted after two days. We also record which pages are viewed, the referring website, the device type (desktop, mobile, tablet) and the words searched on the site, without linking them to a person.
2. Cookies
- nfm: counts how many free locked charts this browser has opened in the last 40 days. It holds chart numbers and dates only, signed so it cannot be altered.
- nfs: keeps you signed in. Set only when you sign in.
- nfx: a short-lived access ticket for the live dashboards. Set only for signed-in users.
All three are strictly necessary for the site to work and are not used for advertising or profiling.
3. Forms
When you use the contact or request-access form we receive your name, email, and, if you give them, your organization, country and message, together with your IP address (used only to limit spam). We use them to answer you and, for access requests, to prepare an offer.
4. Accounts
An account holds your name, username, email, and, if you give them, your phone number and organization. Your password is stored only as a salted scrypt hash, so no one at Namafar can read it. For your security we keep the list of your signed-in devices (IP address and browser), which you can see and sign out in “My account”, and a log of security events such as sign-ins and password changes. Two-factor authentication is optional.
5. Why we process data
To provide the site and the account you asked for, to answer your messages and requests, to keep the service secure, and to understand in aggregate which content is useful. We do not sell or rent personal data and do not share it with anyone else, unless the law requires it.
6. Where data is kept
The site, its databases and its mail server run on servers operated by Namafar in Iran. Our domain’s DNS is managed by Cloudflare, but your traffic goes directly to our server. Fonts and scripts are served from our own server, not from third parties. If you are in the European Union or the United Kingdom, please note that your data is transferred to and stored in Iran, a country that has no adequacy decision under the GDPR. By creating an account or sending us a form you ask us to process your data there.
7. How long we keep it
- Visitor hashes: two days.
- Messages and access requests: as long as needed to handle them and keep a record of our correspondence, unless you ask us to delete them.
- Accounts: until you ask us to close the account. Expired sign-in sessions and password-reset links are invalidated automatically.
8. Your rights
You can ask us for a copy of your data, to correct it, to delete it or your account, or to stop processing it. Write to info@namafar.com from the email address on your account and we will reply within 30 days. If you are in the EU or UK you may also complain to your data protection authority.
9. Children
namafar.com is a research site for professionals and is not intended for children under 16. We do not knowingly create accounts for them.
10. Changes
We will post any change to this policy on this page and update the date below.
Last updated: