Privacy Policy
This policy explains what PakShows ("we") collects, why, and the choices you have. PakShows is an independent website. You can reach us about anything in this policy through our contact form.
What we collect
- Account details: your email address, username and, if you set one, a securely hashed password. We never store your password itself.
- Google or Facebook sign-in: if you use it, we receive your account id, name and email address from that service. We do not post anything on your behalf.
- What you post: your Lamhay (timestamped comments), episode comments, Daad (reactions), likes, votes and the dramas you follow. Lamhay and comments are public and show your username.
- Reacting as a guest: without an account you can watch, give Daad and like Lamhay; writing a Lamha or a comment needs an account. Your guest Daad and likes are linked to a random guest id in a cookie, not to your name. If you later sign up or log in on the same browser, they move to your account.
- View counts: we count how many times each episode is watched (after 30 seconds of play). Counts are totals; they are not linked to your profile.
- Watching: which episodes you watch and where you stopped, so you can resume. You can see this under "Your history" and clear it there.
- Last visit: when you last used the site while logged in, so that reminder emails only go to members who have been away.
- Emails: episode emails (new episodes of dramas you follow or watch, and a reminder of where you stopped after a few days away, at most one a day) are on when you join; you can untick them at sign-up. The weekly recap is sent only if you turn it on. Every email has a one-click unsubscribe link, and you can change both on your account page.
- Security data: your IP address, used to stop spam and brute-force attacks (rate limiting).
Cookies and storage
- Session (
PAKSHOWS): keeps you logged in and protects forms while you browse. Removed when you close the browser. - Keep me logged in (
REMEMBERME): only if you tick the box when logging in, valid for 30 days. - Guest (
ps_guest): set the first time you give a Daad or like without an account, after the "are you human" check. It holds a random id and when you passed the check, is signed so it cannot be forged, and lasts a year. - Language (
ps_lang): remembers English or Urdu, for a year. It is set when you choose a language, or when you read Urdu pages without having chosen one. - Invite (
ps_ref): only if you arrive through a member's invite link, to credit them when you join; 30 days. - Live updates (
__Secure-mercure_access_token): on episode pages, lets your browser receive new Lamhay as they are posted. - Cloudflare: our network provider may set its own short-lived security cookies to stop bots and attacks.
- In your browser only: your theme (dark or light), whether you dismissed the notifications prompt, and, for guests, where you stopped in each episode. These never leave your device.
We do not use advertising or tracking cookies.
Other services
- YouTube: videos play in YouTube's own player, under Google's privacy policy. YouTube may set its own cookies once a video plays.
- Cloudflare Web Analytics: counts visits and pages viewed, and which country and website visitors come from, without cookies and without identifying you.
- Cloudflare Turnstile: checks that sign-ups and guest posts come from people, not bots.
- Google and Facebook: only if you choose to sign in with them.
Your rights
You can see and change your details on your account page and delete your account at any time (see Delete your data). You can also ask us for a copy of your data or raise any privacy question through our contact form.
How long we keep data
We keep your data while your account exists. Deleting your account removes your account, Lamhay, reactions and lists. Your past views are kept only as anonymous counts.