اتصال قطع شد؛ در حال وصل شدن دوباره…

اتصال برقرار نشد.

Privacy

What we keep, and what we do with it

Browsing the catalogue needs no account and asks nothing of you. What follows is about people who create one. This is an English translation of the Persian policy, which is the original.

What we collect

For SMS sign-in we keep your mobile number. For Google sign-in we keep your Google account identifier and verified email address; we do not import your Google display name or request other Google account data. We also keep profile information you choose to provide and videos and portraits you submit. Profile pictures and performance portraits are re-encoded upright without camera or location metadata before storage.

How we use it

Your verified mobile number, verified email or verified Google identity supports sign-in, submitting performances and voting. We may contact you through your saved contact details about a performance or a prize. Your chosen name and public picture appear beside your work. An administrator reviews submitted videos; approved videos follow the publication process and the privacy setting you chose. Private performances are restricted to the owner and accepted partners.

If you accept an invitation to a group performance and choose to share your number, the person who invited you sees your mobile number.

We do not build advertising profiles or track you across other sites.

Who sees it inside Next Iranian Star

Next Iranian Star's own administrators, and only as far as the work requires: a reviewer working through the queue sees the video and the sender's name. Your mobile number appears on your public page only if you tick «نشان داده شود» yourself; your email never does. And the handles you give us stay private until you tick the box that makes them public.

Who sees it outside Next Iranian Star

  • Google and YouTube: Google identity verification and publication of approved videos with the title, description and privacy you chose. Your mobile number and email are not included in the video description. The video description on YouTube includes the stage name and Instagram handle you entered in the submission form; if your account is closed or blocked, the handle is removed from the description.
  • YouTube (Google): YouTube video previews load directly from YouTube, and pressing play opens YouTube's player. Either way your IP address and browser details reach Google, even without an account.
  • Ghasedak: your mobile number and one-time code for SMS delivery. An alternative provider is used only when configured.
  • Zoho: your email address and verification code for email verification.
  • Firebase (Google): notification text and device identifier to deliver mobile notifications.
  • Cloudflare: your IP address and browser details when delivering and protecting each request.
  • Our infrastructure providers: files and the database are hosted on infrastructure we rent.
  • A competent authority only in response to a lawful request. We do not sell your data or provide it to others for advertising.

YouTube API Services

Next Iranian Star uses YouTube API Services to publish approved videos to its own channel. That access is to our Google account, not yours: signing in with Google here grants no access to your YouTube account, and we do not ask for any. We read and store nothing about any viewer from YouTube.

The Google Privacy Policy governs data on Google's side. You can review and revoke any access you have granted to an application from the Google security settings page.

How long we keep it

For as long as you have an account. A one-time sign-in code is invalidated after use and deleted within one day. A video that a reviewer rejects is deleted from our storage, along with any stamped copy of it.

The only YouTube API data we store is the video id of each video we ourselves uploaded — that is, the address of our own content — and our own channel's id and title, which are refreshed from the API whenever an administrator opens the channel screen. Nothing about any viewer, and no data about any other channel, is stored at all.

If someone names you as a partner by your number and you have no account, we do not keep the number itself, only a keyed hash of it, for 90 days, so that an invitation can reach you if you sign up with that number. It is then deleted.

The name, contact details and message you send through the sponsorship form are kept for 12 months and then deleted.

Cookies

We use cookies for sign-in (30 days), form forgery protection, story-link attribution (10 minutes), Google sign-in and the vote requested before going to Google (10 minutes each), and a random device identifier to limit account creation and voting by several Google accounts from one device, and to count performance views (400 days). We use no advertising or cross-site tracking cookies.

  • artistyar.reader
  • .AspNetCore.Antiforgery.f70463BVEBk
  • ay_src
  • nis.account-merge
  • nis.account-merge-switch
  • nis.account-merge-kind
  • nis.account-merge-return
  • nis.sponsor-draft
  • nis.sponsor-draftC*
  • __Host-nis.google
  • .AspNetCore.Correlation.*
  • __Host-artistyar.pending-vote
  • __Host-artistyar.vote-browser
  • __Host-artistyar.device

Site and app usage measurement

Our own server records page type, time, source, device class and steps in the sign-in, voting and submission flows. The measurement tables contain no name, mobile number or email address.

We do not store raw IP addresses. Rate-limit identifiers use HMAC with a secret that changes daily, retained for at most 48 hours. Anonymous visitor identifiers also use daily keys, which are destroyed after 48 hours. Anonymous measurement rows are retained for at most thirteen months, then only daily totals remain.

To find duplicate accounts in voting, we keep an encrypted form of each vote's internet network next to the vote, made with that day's key; the key is destroyed after 48 hours and the encrypted form cannot be turned back into an IP address. To limit account creation and Google sign-in, an encrypted form of the network and of a device identifier is kept for at most 48 hours. So that only one Google account per device votes in each competition, an encrypted form of the device identifier is kept next to the votes of Google accounts and deleted when that competition's result is published.

To count a performance's views (at most five a day from each viewer), we make an encrypted form of the account or the device identifier with that day's key and keep it only until the end of that day; it is not linked to the viewer's name, number or email.

The history of votes (new votes, moved votes and votes taken back), with the time, the platform and the encrypted form of the network, is kept for thirteen months so that a challenge to a result can be checked; when an account is deleted, your name is removed from this history.

Deleting your account, and asking us to delete data

Erasure replaces your name on performances, our YouTube channel and recorded winners with “Deleted account”, and removes your notes and invitation messages. Published competition and free-performance videos and already frozen vote results remain. YouTube corrections run in a retryable background job.

You can delete your account from the account page on the site or in the app, or at nextiranianstar.com/account/delete. It happens in two steps. The account closes at once: no way of signing in opens it and every session on every device ends. Within seven calendar days we then erase your name, number, email address, picture, social handles, Google connection from it.

Votes and the videos you entered in a competition are part of that competition's record. Closing excludes your votes from current totals and new draws; already frozen results remain unchanged. If you want a video taken down as well, tell us. Corrections you made to the catalogue itself remain — those are facts about music rather than about you.

You can also ask us to delete any data we hold about you, including the YouTube video id we keep for a video of yours, by writing to us from the contact page. We delete it within seven calendar days, and usually the same day.

For any question about your data, write to us from the contact page.

نسخهٔ فارسی