Skip to content
Search the siteCtrl ⌘KLog in

Privacy policy

This policy explains what data next21.ru (the "site", run by the NEXT21 team) collects, why, and for how long. By using the site and signing up you agree to it.

What we process

  • Account: email, display name, password (only its hash is stored), interface language, the date you accepted this policy.
  • Comments and submissions: text, author name and date; uploaded files and resource descriptions.
  • Downloads: to count one download per day, we store a salted hash of the IP address, the date and the file. The IP address itself is not stored, the keys are deleted every night; only daily totals remain.
  • Abuse protection: the IP address is used in server memory to rate-limit sign-in, sign-up and comments, and is not written anywhere.
  • Visit statistics: we collect them ourselves, without cookies or third-party counters. When you view a page, the browser reports its address, the site you came from, the window width and the language; the server reads the browser name and system from its header. So that one visitor is not counted twice a day, the server keeps in memory, for one day, a salted hash of the IP address, the browser and the date; it is never written to disk. The database keeps only daily totals: views and visitors per page, source, browser, system, device type and language.

Why

So that you can sign in and post comments and resources, moderators can review submissions, the site can show download counts and popularity, fight spam and learn which sections visitors need. We do not sell data or use it for advertising.

Cookies and local storage

  • payload-token: the sign-in cookie, set only after you sign in; signing in does not work without it.
  • theme in localStorage: your colour theme.

Third-party services

  • Discord: your browser asks discord.com directly for the number of members online.
  • YouTube: the preview image loads from i.ytimg.com; the player itself (youtube.com, youtube-nocookie.com) only after you click the preview.
  • VirusTotal (Google): archives uploaded to the site are sent for an antivirus check.
  • Email provider: delivers address confirmation and password reset emails, and notifications about replies and mentions in comments (turned off by the link in the email).

Retention

Account data and submissions are kept while the account exists. Download counting keys are deleted every night, visitor hashes do not outlive the day or a server restart; daily statistics totals are kept indefinitely. Database backups are kept for up to six months.

Your rights

You can ask what data we hold about you, correct it, delete your account and withdraw consent (under the GDPR, too: access, rectification, erasure, portability, objection). Contact us: Discord. We answer within 30 days.