Privacy Policy

1. Who is responsible for your data

The controller of the personal data described in this policy is Alperen Karamus, which operates ummahportal.com.

You can reach us about anything in this policy, or about your own data, at contact@ummahportal.com or through the contact form on this site. We have not appointed a data protection officer; requests go to the address above.

2. What we collect

Contact form: the name, email address, subject and message you type. Nothing else is attached to it.

Technical data: every request to this site passes through our hosting provider, Cloudflare, which processes your IP address, your browser’s user agent, the page requested and the page you came from, in order to deliver the site and protect it from abuse.

Location: the prayer times and qibla tools read your device location in the browser and send coordinates to the AlAdhan service to calculate a result. We do not store your location.

On your device: your theme choice, your cookie consent choice and your dhikr counter are kept in your browser’s local storage. They stay on your device and are never sent to us.

With your consent only: advertising and analytics identifiers set by Google, described in sections 5 and 6.

3. Why we process it, and on what legal basis

To answer a message you send us — Article 6(1)(b) GDPR where you are asking about something we provide, and otherwise our legitimate interest in replying to people who write to us, Article 6(1)(f).

To serve the site, keep it available and defend it against attack, and to remember the preferences you set on your own device — our legitimate interest in running a working website, Article 6(1)(f). The storage of your theme, consent choice and counter is strictly necessary to give you what you asked for, so it does not depend on consent.

To show personalised advertising and to measure how the site is used — your consent, Article 6(1)(a), together with the national law implementing the ePrivacy Directive for the storage on your device. If you decline, or if you are in the EEA or the UK and have not yet decided, no advertising or analytics storage takes place.

4. Cookies, local storage and consent

A banner asks for your choice the first time you arrive. Until you accept, advertising and analytics storage is switched off by default for visitors in the EEA and the UK, using Google Consent Mode. Declining leaves it switched off.

Storage that is strictly necessary — remembering that you answered the banner, your theme and your counter — is used whatever you choose, because the site cannot honour your choice without recording it.

5. Advertising, and Google’s role

This site displays advertising served by Google AdSense. Google and its advertising partners may set cookies and similar identifiers in your browser to select and measure ads, including ads based on your earlier visits to this and other sites.

For that advertising data Google acts as an independent controller, not as a processor working on our instructions: it decides for itself how the data is used across the sites it serves, and it is answerable for that use. What Google does with it is described in “How Google uses information from sites or apps that use our services”, at https://policies.google.com/technologies/partner-sites.

You can turn off ad personalisation in your Google account at https://adssettings.google.com, and you can withdraw the consent you gave here using the button at the end of this page.

6. Analytics

When you consent, we use Google Analytics to see which pages are read and roughly where readers come from. It sets an identifier in your browser and sends Google the pages you view along with your IP address, from which Google derives an approximate location; the IP address is not made available to us, and we never see your name or contact details in analytics.

With no consent, analytics storage stays off and no such identifier is set.

7. Other services we rely on

AlAdhan (aladhan.com) calculates prayer times and Hijri dates from coordinates or a city name sent by your browser. It receives nothing else.

Cloudflare hosts this site and stores contact form submissions in its database service.

The Quran text and translations on this site are held in our own files and are not fetched from a third party while you read.

8. How long we keep data

Contact form messages: kept no longer than 24 months from your last message, then deleted.

Hosting and security logs: kept by Cloudflare for the short period set out in its own retention policy.

Analytics: user-level data is kept for the retention period configured in the Google Analytics property; Google’s default for a new property is 14 months.

Advertising identifiers: retained by Google under its own policies, which you can read at https://policies.google.com/technologies/partner-sites.

Anything stored on your device stays until you clear your browser’s site data.

9. International transfers

Google LLC and Cloudflare, Inc. are established in the United States and may process the data described above there or in other countries outside the EEA and the UK. Those transfers rely on the European Commission’s standard contractual clauses and, where the company is certified, on the EU–US Data Privacy Framework.

A request to AlAdhan may likewise be answered from a server outside your country.

10. Your rights

You have the right to ask us for a copy of the personal data we hold about you, to have it corrected, to have it erased, to have our processing restricted, to object to processing we base on legitimate interest, and to receive the data you gave us in a portable form.

Write to us at contact@ummahportal.com and we will answer within one month. We may need to ask a question back if we cannot otherwise tell which messages are yours.

You also have the right to complain to a data protection supervisory authority, in particular in the country where you live, where you work, or where you think something went wrong.

11. Withdrawing consent

You can take back the consent you gave at any time, and it is as easy as giving it: use the button below. Your stored choice is cleared, advertising and analytics storage is switched off immediately, and the banner asks you again.

Withdrawing consent does not undo processing that already happened while the consent was valid. You can also clear this site’s data in your browser, which has the same effect.

12. Children

This site is a general reference and is not directed at children. We do not knowingly collect personal data from a child.

In the EEA, consent to services like advertising and analytics is valid on its own from the age of 16, unless the country where the child lives has set a lower age — member states may set it anywhere between 13 and 16, and several have. In the United Kingdom the age is 13. Elsewhere we apply 13.

If you believe a child has given us personal data, write to us and we will delete it.

13. Changes to this policy

We may update this policy. Changes appear on this page with a new revision date, and where a change concerns what you consented to, the banner will ask again.