Privacy policy
Last updated: October 2026 · version 11. The Arabic version is the reference text.
In short
You can use the khatma, memorisation and tafsir sections without an account, and everything stays in your browser. Accounts are optional; if you create one we keep only what is needed to sync your progress. No ads, no analytics or trackers, and we never sell or share your data.
Without an account: on your device only
Your browser's local storage keeps your khatma progress (plan, ticked portions, saved verse, completion record and save points), your memorisation and review progress and settings, your appearance and reading-pace settings, and your last selection in the tafsir library. None of this is sent to a server. Clearing browser data may remove it, so download a backup from “Backup & settings” or create an account.
If you create an account
- What we store: your name, email, your password as a one-way hash (PBKDF2-SHA256 with a random salt and 100,000 iterations), and a copy of your progress and settings.
- Email: used only for the verification link (valid 48 hours) and password-reset links you request (valid one hour). No marketing email.
- Cookie: one essential sign-in cookie (90 days, not readable by page scripts). No tracking cookies.
- Abuse protection: to limit repeated attempts (such as sign-in and email links) an IP address or email is kept with a temporary counter and deleted automatically within a day.
- Hosting: data is stored with Cloudflare and sent over HTTPS. Cloudflare may keep technical operating logs under its own policy.
- Statistics: the site administrator sees aggregate counts only (such as the number of accounts and completions), not any individual's progress.
- Deletion: delete your account at any time from “My account”; your data, sessions and reminder subscription are removed from the server and your progress stays on your device. Unverified accounts are deleted after a week.
Sign in with Google
If you choose to sign in with Google, Google's button is loaded from Google only when the sign-in sheet opens, and we receive your name, email and Google account ID to create or link your account. We never see your Google password or any other data. Google's privacy policy applies to that step.
Prayer reminders
Reminders do not require an account, but they need a connection and our server to send each notification on time. When you turn them on we store the coordinates of the city you pick (or your approximate location if you choose “my location”), your time zone, your reminder settings, the push address your browser provides, and a short summary of today's and tomorrow's portions for the notification text. Notifications are sent encrypted through your device's push service (Apple, Google, Microsoft or Mozilla). Turning reminders off deletes all of this. When you search for a city that is not in the built-in list, the name you type passes through our server to the Open-Meteo geocoding service, with nothing about you.
Tafsir library
The catalogue of scholars, books and lessons is part of the site, and searching it happens on your device. The recordings are published on Google Drive: pressing “show player” loads Google Drive's embedded player, and “open in Google Drive” takes you to Google, where Google's privacy policy applies. Nothing is loaded from Google before you press.
Offline
| Feature | Without internet |
|---|---|
| Khatma, memorisation, review and record | Works after the first visit |
| Browsing the tafsir catalogue | Works for what you opened before |
| Playing recordings | Does not work (Google Drive) |
| Account and sync | Needs a connection; your changes stay on your device |
| Prayer reminders | Sent by the server; arrive when your device is online |
Fonts, files and sharing
All fonts and images are served from alkhatmah.com itself. When you share a completion card, the image is created on your device and goes only to the app you choose.