Privacy Policy — Hisn Al-Dhakireen

1. About this site

Hisn Al-Dhakireen (hisnalmuslim.org) is a free, non-commercial website serving Islamic remembrances (adhkar), supplications and the Quran; its content is reviewed and its sources and rulings documented, with correction and updating continuing; each text shows its source and ruling.
The site shows no advertising, offers no subscriptions, currently collects no donations, and never sells data.
There are no user accounts or logins. We never ask for a name, email address or any identifying information to use any part of the site.
The only form that sends anything to us is the "report a note" form on each card; it does nothing unless you fill it in and submit it. Details are in section 6.
We keep no database about visitors. The only table we operate is a short-lived technical log that protects the report form from repeated submissions, as described in section 6.

2. Technical data held by the hosting provider

The site is hosted on the Lovable platform and served through a content delivery network. As with any web server, the hosting infrastructure may automatically keep technical request logs, which can include:

Your device's IP address.
Browser type and operating system (User-Agent).
Request time, requested page, and the referring page if any.
Your search term if you use the search page, because it appears in the page URL (/search?q=…).

These logs are managed by the hosting provider for operations, security and abuse prevention; we do not control how long they are retained. We run no analytics or tracking of our own (no Google Analytics, advertising pixels or heat maps) and we set no cookies of our own.

3. Local storage on your device

The site keeps your preferences and reading progress on your device only, in localStorage and sessionStorage. This data is never sent to our servers or to anyone else. The complete list is:

Key azkar:reader-settings: whether diacritics are shown, bold text on/off, font size, line spacing, and quiet reading mode.
Keys azkar:counters:N (N = section id): remaining repetitions for each dhikr in a section together with today's date; they reset automatically each new day.
Key azkar:vision: the colour-vision / high-contrast display mode, if you choose one.
Keys azkar:last-position:N: the last dhikr you stopped at in a section with today's date, used for the "back to last position" button.
Key azkar:theme: your light / dark / "follow the device" choice, read before the page is painted so the screen does not flash. The default is "follow the device", which follows your system setting without us learning anything about it.
Key azkar:report-log: the times and card keys of the notes you recently submitted, used to warn you about duplicates. It stays on your device and is never sent to us.
Keys hisn:folded:N in sessionStorage: which cards you folded in a section; they are discarded when the tab closes.

There is currently no favourites feature and nothing else is stored. The in-site "reset all settings" button clears counters, reading positions, reading settings, vision mode and per-session folded-card state; it does not clear the local report-warning log azkar:report-log. You can delete all site data, including that log, at any time from your browser settings (clear site data).

4. Third-party services your browser connects to

When you open the site or use certain features, your browser requests resources directly from third parties, which therefore receive the usual technical request data (IP address, browser type, request time) under their own privacy policies:

Google Fonts (fonts.googleapis.com and fonts.gstatic.com): the Arabic display fonts are loaded from there on every page.
Quran recitations (a feature open to everyone on the recitations page): reciter and chapter lists are fetched from Quran Foundation / Quran.com servers through our own server, while the audio file itself streams to your browser directly from Quran Foundation servers (e.g. download.quranicaudio.com) after you choose a chapter, so they receive the technical request data under their privacy policy. We do not store or re-host recitations, and nothing plays automatically when the page opens.

Prayer-times card: it shows prayer times for Makkah only, computed in your browser from fixed Makkah coordinates. The site never requests, estimates, or stores your location, and your IP address is not sent to any geolocation service.

Apart from the above, the site loads no third-party scripts or frames.

The Share button does nothing until you press it. It uses your device's native share sheet, copies text to the clipboard, or opens a share link on the platform you choose (WhatsApp, X, Telegram, Facebook). Whatever you share there is governed by that platform's privacy policy and never passes through our servers.
Shared text contains only the dhikr, its reference and the page link — nothing about you.
Printing happens locally in your browser.

6. Reporting a note on a card

Every card (adhkar, the Names of Allah, the Forty Nawawi hadiths and search results) has a "report a note" button. Nothing is sent unless you fill in the form and press send. When you do, the following reaches the site administration mailbox:

The note type you selected and your message exactly as you wrote it.
The card key, title and link, resolved from the site's own data rather than from anything the browser sends.
Your email address if you type one. It is entirely optional, is used only to reply to you, and you may leave it blank — the note is sent without it.
The time of submission.

We do not ask for your name, we attach no location data, we never add your address to a mailing list and we share it with no one. Every note is reviewed by a human and never changes any text or ruling automatically.

To protect the form against repeated or automated submissions, one row per attempt is stored in the site database containing: an irreversible hashed fingerprint (SHA-256 with a secret salt) derived from the connection address, the card key, and the attempt time. The IP address itself, your message and your email are not stored in that log, and rows older than 24 hours are cleaned when the protection function is invoked. The limits are one note per card every 10 minutes, three per minute and ten per day. If this protection cannot run, the submission is refused and no email is sent.

The message is delivered through the email provider used by our hosting platform, so your note and address pass through it for delivery purposes only.

7. Retention

We hold no personal data about you except what you yourself send through the report form; your message and optional email stay in the administration mailbox until the note has been reviewed and is no longer needed.
Rows older than 24 hours in the report-protection log (hashed fingerprint, card key, timestamp) are cleaned when the protection function is invoked.
Local storage data stays on your device until you delete it; daily counters are replaced automatically at the start of a new day.
Technical logs held by the hosting provider and the third parties listed above are subject to their respective retention periods.

8. Your rights

We build no profile about you. If you sent a note and want your message or email deleted from the administration mailbox, write to the address below and we will delete it.
You can delete all site data stored on your device from your browser settings at any time.
For any privacy question or request, contact us through the channel below and we will reply as soon as possible.

9. Children

The site is suitable for all ages and does not require an account. If a child or guardian sends a note through the report form, the limited report-form data described in this policy applies, and deletion can be requested through the contact email.

10. Changes to this policy

If we add a feature that changes anything stated here (for example changing the recitation or font provider), we will update this page and its date before or together with the change.

11. Contact

Use the contact form to send your request to the site administration. Contact us