Privacy Policy

Last updated: 2 November 2026

In short: Noor-e-Hidayah has no accounts, no ads and no analytics or tracking scripts. Your progress and settings stay on your own device unless you switch on one of the three optional features described below (encrypted sync, background prayer alerts, live gold/silver prices) or send us a message. A few features load content from third-party services, listed below.

What we do not do

We do not ask you to create an account or sign in.
We do not use cookies, advertising or analytics tools on this website.
We do not sell or share personal information.

What is stored on your device

To remember your progress and choices, the website saves small items in your browser's local storage. This data stays on your device and is not sent to us. It includes:

Your chosen language and translation, and whether you dismissed a language notice.
Lessons you marked as completed, and your quiz results.
Qur'an bookmarks, your last-read position, and surahs saved for offline reading.
Hadith you marked, your Hijri date adjustment, today's dhikr, and your voice speed.
Your prayer-time and reminder settings. If you use your location (below), the coordinates are part of these settings.
Your Khatam progress, your quiz review list and daily streak, and the last gold and silver prices you typed into the Zakat calculator.

You can delete all of this at any time by clearing this site's data in your browser settings. If you clear it, your progress is lost.

Backups

The backup button on your dashboard creates a file on your own device. The file is never sent to us. Restoring a backup only reads the file you choose.

Your location

Prayer Times, Qibla and reminders can ask your browser for your location, but only when you tap the button for it. The calculation is done on your device and the location is not sent to us. The one exception is background prayer alerts (see below): if you switch those on, your approximate location is sent to our server. You can also choose a city by hand instead of using your location.

Optional features that use our server

These only run if you switch them on. Our server (a Cloudflare Worker with a Cloudflare D1 database) does not use cookies and does not build a profile of you.

Encrypted cloud sync

If you create a sync key on the dashboard, your progress is encrypted on your device with a random key before it is uploaded. We store only the unreadable encrypted data and a hash derived from your key. We never see the key or your progress, and we cannot recover it for you: if you lose the key, the synced copy cannot be read. You can delete the synced copy from the dashboard at any time. Copies that are not updated for about 13 months are deleted automatically.

Background prayer alerts (push notifications)

If you switch these on, we store: your browser's push-subscription address and keys (needed to deliver the alert), your location rounded to about 1 km, your calculation method and Asr school, and the time of your next prayer. This is used only to send the prayer alert. You can switch the alerts off in the app, which deletes this record; records whose alerts keep failing are removed automatically. The push message is delivered through your browser vendor's push service (for example Google, Mozilla or Apple), which sees that a notification is being delivered to your device.

Live gold and silver prices (Zakat)

The Zakat calculator can ask our server for the current gold and silver price. Your browser sends only the currency you pick. Our server gets the price from a metals-price provider and keeps a short-lived cached copy.

Hosting

The website and the API are served through Cloudflare, which processes requests (including IP addresses) to deliver and protect the site, as any host does.

Third-party services

When you use these features, your browser connects directly to the services below. They can see your IP address and basic browser information, as with any website. Please read their own privacy policies.

Google Fonts (fonts.googleapis.com, fonts.gstatic.com): page fonts.
AlQuran.cloud (api.alquran.cloud): Qur'an text, translations and transliteration for the reader.
Islamic Network CDN (cdn.islamic.network): Qur'an recitation audio.
Cloudflare Turnstile (challenges.cloudflare.com): a spam check on the contact form, if it is switched on.
Your browser's speech engine: the "listen" buttons for some duas use text-to-speech. Depending on your browser and device, this may use an online voice service.
WhatsApp: the share button only opens WhatsApp with the text you choose to share.

Contact form

If you send a message, we receive the topic, page, message and the email address you chose to enter (optional). It goes straight to our own server, not to a third-party form service. We keep it for up to 180 days to read and reply, and then it is deleted. To limit spam we also keep a salted one-way hash of your connection address (not the address itself) for a short time. We do not add you to any mailing list. If e-mail delivery is switched on, the message is forwarded to our team inbox through an e-mail delivery provider.

Children

The website collects no personal information from anyone, including children. Parents are welcome to use it with their children.

Changes

If this policy changes, the date at the top will be updated. Questions? Please contact us.