Privacy Policy
Last updated: 2026-05-15
1. What we do NOT store
- We do not store your precise location. When you use your location, calculation runs in the browser.
- We do not store device compass readings.
- We do not store any behavioural or preference data linked to you.
- We do not store your IP address in our application database. (Operational Cloudflare logs are short-lived and not used to target users.)
- We do not store your zakat calculator inputs. They never leave your browser.
- We do not store credit card data. When donations launch, you are redirected to Stripe and back; no card data ever touches our servers.
2. What we do store
QiblaWeb stores public reference data only in Cloudflare D1: a city list, prayer calculation methods, sourced duas, reviewed articles. There is no visitors table, no sessions table, no preferences table.
3. Permissions
Browser permissions are requested only after a clear button click, each preceded by a pre-permission explanation card. No permission is requested at page load.
- Geolocation: Used locally to compute prayer times and Qibla. Never sent to the server.
- Device orientation (compass): Used to rotate the Qibla arrow. Not stored, not transmitted.
- Notifications: In the current release, reminders only work while the page is open. No background push subscriptions.
- Camera: Not requested at MVP. (AR Qibla mode is a future Phase 2 feature.)
4. Advertising and analytics
There are no ads on QiblaWeb. No affiliate links. No marketing tracking. No behavioural analytics. This is enforced by an automated check on every deployment.
If the owner ever adds privacy-respecting aggregate measurement (e.g., cookie-less Cloudflare Web Analytics), this policy will be updated before any such change.
5. Cookies
QiblaWeb sets zero cookies in the current release.
6. Third parties
- Cloudflare: Infrastructure provider (hosting, CDN, security). Cloudflare policy
- Stripe: Payment processing for Phase 1.5+ donations. Processing happens on Stripe domains, not ours. Stripe policy
- EveryAyah.com (Quran audio recitation): When you tap the play button on an ayah, your browser connects directly to EveryAyah.com to download the recitation MP3. EveryAyah is the Tanzil project's non-profit Quran audio archive — no ads, no tracking. QiblaWeb does not proxy or store the audio request. everyayah.com
6.1 Details on Quran audio
QiblaWeb chose not to route audio recitations through its own servers for two reasons: (1) to keep the site free and sustainable as it grows, and (2) to avoid creating a central log of who listened to which ayah. The exposure is limited to a single MP3 request to a well-known non-profit host.
What reaches EveryAyah.com when you play an ayah: your IP, your User-Agent, the reciter slug, the surah and ayah numbers. What does NOT reach them: your identity, the fact that you came from QiblaWeb (we strip the Referer), or your past listening history on our site. For their full practices: everyayah.com.
Available reciters (sourced from EveryAyah.com): Mishary Alafasy, Mahmoud Al-Husary, Abdul Basit Abdul Samad (Murattal), Abdurrahman As-Sudais, Mohamed El-Minshawi (Murattal), Saud Ash-Shuraim, Saad Al-Ghamadi.
7. Data retention
Since we don't store visitor data, there is nothing to retain on our side. Operational Cloudflare logs follow Cloudflare's short retention policy.
8. Your rights
Because we keep no personal data tied to you, there is nothing to request, access, or delete. If you believe otherwise, please email us.