Draft, for legal review before publication
Privacy and cookie policy
1. Who we are
This policy explains how the Afghanistan Freedom Movement (“the movement”, “we”) handles personal information on afghanistanfm.com, its Forum and its admin panel. For any question about your information, write to [email protected].
2. Information you give us
Join list. If you add your name on the homepage we store your email address and, if you give one, your name.
Forum account. If you create an account we store your email address, the display name you choose, and your password in hashed form. We cannot read your password. You do not have to use your real name. We also record the date you accepted these terms.
What you post. Threads, replies, poll answers and photos you upload are stored with your account. Threads, replies and photos are public under your display name. Your individual votes are not shown to other members; only totals are.
Photos. Every photo you upload is re-encoded on our server, which removes location and camera information stored inside the file.
Reports. If you report a post, we store the report and the reason you give. Other members cannot see who reported a post.
3. Information we record automatically
When you create an account or sign in, we record the IP address your device connects from, the type of browser, and the time. We do this to keep accounts secure and to deal with abuse.
If you accept cookies, we also set a device cookie containing a random identifier, and record your IP address and browser type on visits, linked to your account while you are signed in. If you choose “Essential only”, we do not set this cookie or record visits.
These device and access records are deleted after 90 days. Device identifiers not seen for 12 months are deleted.
Our web server and our network provider also keep standard technical logs of requests, including IP addresses, for a limited time.
4. Cookies
Sign-in cookie (essential). Set when you sign in, so you stay signed in. It lasts up to 30 days and is removed when you sign out.
Device cookie (optional). Set only if you choose “Accept all”. It holds a random identifier for your device and lasts up to 12 months.
Your choice. Your cookie choice is remembered in your browser. You can change it at any time with the “Cookie settings” link at the bottom of any page.
We use no advertising cookies and no third-party analytics.
5. How we use information
To run the Forum: showing your posts, counting votes and keeping you signed in.
To keep the Forum safe: moderating posts, handling reports, preventing spam and abuse, and investigating misuse.
To contact you: sending movement updates to the Join list, and replying when you write to us.
We do not sell personal information and we do not use it for advertising.
6. Who else handles information
Hosting. The site runs on a rented server and is delivered through Cloudflare, which processes the IP address your device connects from.
Fonts. Pages load typefaces from Google Fonts, so your browser contacts Google to fetch them.
Moderation. The text and photos of each new Forum post are sent to an automated moderation service operated by Anthropic, to check them against the Forum rules before they appear. Your email address and IP address are not sent.
Administrators and moderators of the movement can see held and reported posts. Administrators can also see members’ email addresses and the device and access records described above.
We may disclose information if the law requires it. We do not otherwise share it.
7. Keeping you safe
Your email address is never shown to other members. Do not post details that could identify you or anyone else.
No online service can promise perfect security. If being identified would put you at risk, use an email address that is not linked to your name, choose “Essential only” for cookies, and consider connecting through a trusted VPN or Tor.
8. How long we keep information
Account details are kept until you delete your account. Device and access records are kept for 90 days. Join-list entries are kept until you ask us to remove them. Removed and deleted posts are hidden from the Forum but kept for moderation records.
9. Your choices and rights
You can delete your account at any time from the Account page in the Forum. Your email, password, display name, votes, and device and access records are erased. You choose whether your posts are removed or kept under the name “Deleted member”.
To be removed from the Join list, write to [email protected].
You can ask us for a copy of the information we hold about you, or ask us to correct or erase it, by writing to [email protected]. Depending on where you live, you may also have the right to complain to your data protection authority.
10. Children
The Forum is not intended for anyone under 16. We do not knowingly collect information from children under 16.
11. Changes
If this policy changes, the new version will be published here with a new date.