What SurahSpot knows
about you.

What stays on your device

Your reading position, streak, daily goal, My List, hidden Ayahs, memorization progress, reader preferences and theme are all kept in your browser’s local storage. They are never sent anywhere. Clearing your browser data removes them, and they do not follow you to another device.

Cookies

One cookie, named surahspot_attempt. It identifies your current seven-round attempt so the server can tell that a guess belongs to the round it was issued for. It carries no name, no email and no identifier that is useful anywhere else.

There are no analytics cookies, no advertising cookies and no third-party cookies, because there is no analytics, advertising or third-party script on this site at all. This is why you are not being asked to accept anything.

What the server records

• Your IP address, briefly. Used to count requests per minute so the site cannot be hammered into unavailability. These counters expire within the hour and are not used for anything else.
• Ordinary server logs. Errors and request failures, kept to find and fix faults.

If you send feedback

The form in the footer sends whatever you type — your message, and your name and email if you choose to give them — to the site owner by email, through the delivery provider Resend. Name and email are optional; a message alone works, though then there is no way to reply. Nothing from the form is stored on this site, and nothing is added to a mailing list.

If you turn on reminders

Only if you ask for them. Turning reminders on stores a push subscription for that browser: an endpoint URL supplied by your browser vendor’s push service, the keys needed to encrypt messages to it, your time zone, and two facts needed to keep the streak reminder honest — the day you last read and your current streak length.

What you read is not sent. The reminder needs to know whether you read today, not what. Turning reminders off deletes the record, and a subscription the push service reports as dead is deleted automatically.

Who else is involved

• Quran Foundation supplies the Qur’an text, translations and recitations. Your browser never contacts them directly; this server fetches the content and passes it on, so they do not see you.
• Fly.io hosts the site and necessarily handles the traffic.
• Resend delivers feedback messages, and only if you send one.
• Your browser vendor’s push service — Apple, Google or Mozilla — delivers reminders, and only if you turn them on.

Children

SurahSpot is suitable for all ages and asks for no personal information to use it. Nothing here is directed at collecting data from children, because nothing here collects data from anyone unless they type it into the feedback form.

Removing what there is

Clear your browser data to remove everything stored on your device, including the cookie. Turn reminders off to delete the push subscription. For anything sent through the feedback form, ask via that same form and it will be deleted.

Changes

If what the site collects changes, this page changes with it. It describes the code as it stands, not an intention.

Questions go to the feedback form at the bottom of any page, or see the terms.