This page is maintained by the FarsiRadio.com team to answer common security and privacy questions about our free Persian radio player. It describes app-visible controls and current practices; it is not an independent certification and is not verified by any third party.
Shared responsibility
FarsiRadio.com is hosted on Cloudflare, which provides TLS-terminated HTTPS hosting, with managed backend infrastructure via Supabase. The FarsiRadio.com team is responsible for the application code, content, and how user-submitted data (such as listener comments) is handled. Listeners are responsible for protecting their own devices, accounts, and any personal information they choose to share publicly on the listener wall.
Authentication & access
- FarsiRadio.com does not require an account to listen to any station. Playback works fully anonymously.
- Optional accounts are available for users who want to keep favourites and post on the Listener Wall under a stable identity. Authentication is handled by Supabase Auth using email + password.
- Administrative functions are restricted to accounts with an explicit admin role, checked server-side via Postgres row-level-security policies.
Data collection & use
- Anonymous playback: we do not require any personal information to start a station.
- Listener Wall comments: the display name, optional city/country, and message text you submit are stored and shown publicly to other listeners. Do not post anything you would not want indexed by search engines.
- Aggregate counters: total visit counts and station like counts are tracked in aggregate, not per individual user.
- IP addresses: request IP addresses are used only for spam and abuse prevention and are not displayed publicly or shared with third parties.
- We do not sell user data, and we do not run third-party advertising trackers that profile listeners across the web.
Subprocessors & integrations
FarsiRadio.com relies on a small number of third-party services to operate:
- Cloudflare — application hosting and CDN.
- Supabase — database, authentication, and edge functions used by the listener wall, likes, and admin tooling.
- Independent radio broadcasters — live audio streams are fetched directly from the originating Persian radio stations (e.g. Radio Farda, Iran International, KIRN 670). Those broadcasters control their own audio and any metadata they expose.
- Google Analytics / Search Console — used for aggregate visit measurement and SEO monitoring.
Cookies
FarsiRadio.com uses a small number of cookies and local-storage entries for: keeping you signed in (when you choose to sign in), remembering your last-played station and volume, remembering which Listener Wall comments you have liked, and basic analytics. No cross-site advertising cookies are set by us.
Retention & deletion
- Anonymous Listener Wall messages older than 24 hours are removed automatically by a scheduled cleanup job.
- Authenticated comments remain until the author removes them or requests account deletion.
- Security audit logs are retained for up to 30 days and used only for abuse investigation.
Privacy requests
If you have signed in and want your account or comments removed, or if you have a privacy question, email us at privacy@farsiradio.com. We will respond within a reasonable timeframe.
Security contact & vulnerability reporting
If you believe you have discovered a security issue affecting FarsiRadio.com, please report it privately to security@farsiradio.com before disclosing publicly. Please include steps to reproduce and any relevant URLs. We appreciate responsible disclosure.
Platform security controls in use
- HTTPS everywhere with HSTS preload enabled.
- Strict Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy headers.
- Postgres row-level-security on all user-facing tables, with security-definer role checks for admin operations.
- Server-side rate limiting and spam detection on listener-wall submissions.
- Automatic service-worker update flow so installed PWA users receive new versions promptly.
What we do not claim
FarsiRadio.com is a free community-run Persian radio player. We do not hold SOC 2, ISO 27001, HIPAA, PCI, or GDPR certifications, and we do not represent this page as an independent audit. Use of the site is at your own discretion; for the most sensitive use cases, please review the platform documentation of Cloudflare and Supabase directly.