Privacy
Surau Privacy Policy
Effective July 23, 2026. This policy explains the data Surau processes when you use surau.org and Surau Reader.
اقْرَأ
Privacyالقرآن
Privacy
Surau Privacy Policy
Effective July 23, 2026. This policy explains the data Surau processes when you use surau.org and Surau Reader.
Public pages can be read without an account. Our infrastructure may process IP address, request time, token-free path, device or browser type, and technical security data. If you create an account, we process your email, display name, verification status, sessions, and the reading preferences and progress you choose to save.
We use data to provide and secure accounts, sync preferences and progress, send authentication emails you request, provide support, prevent abuse, improve reliability, and understand product usage in aggregate. Surau does not sell personal data.
Surau uses secure session cookies for authentication and may use product analytics to measure reliability and feature usage. Authentication tokens are not sent to analytics. Tokens are kept in HttpOnly cookies when needed for a session and are not stored in localStorage or sessionStorage.
Account data is retained while the account is active or as needed to provide the service, meet legal obligations, resolve disputes, and maintain security. Technical logs are retained only as needed for operations and security. You may request correction or account deletion through support.
We may use infrastructure, email delivery, and analytics providers as data processors. They receive only the data needed to perform their services and are subject to contractual safeguards. Processing may occur in countries where those providers operate.
We use HTTPS, HttpOnly cookies, access controls, and other reasonable safeguards. No system is completely risk-free. Surau is not intended to collect data from children below the age requiring parental consent; a guardian may contact us to request deletion.
To request access, correction, deletion, or ask a privacy question, email hello@surau.app. We may verify your identity before fulfilling a request. Material changes to this policy will appear on this page with a new effective date.