Privacy Policy
Your privacy matters to us. Learn how Siraat collects, uses, and protects your information.
Last Updated: February 2026
Siraat ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.siraat.website and use our services. Please read this policy carefully. By using Siraat, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Account Information
When you create a Siraat account, we collect your email address and name. This information is used to identify your account, enable you to log in, and personalize your experience across devices.
Location Data
Siraat requests access to your device location to provide accurate prayer times and Qibla direction. Location access is only activated when you explicitly grant permission through your browser or device. Your precise location coordinates are used in real time to calculate prayer times and are never stored on our servers. If you decline location access, Siraat will default to Mecca, Saudi Arabia for prayer time calculations.
Usage Data
When you use Siraat with an account, we store data related to your spiritual activities to enable features like progress tracking and cross-device sync. This includes prayer logs (which prayers you have prayed and when), Quran bookmarks (surah and verse references), dhikr counter values and targets, and your personal preferences and settings.
How We Use Your Information
We use the information we collect for the following purposes:
- Provide accurate prayer times based on your location
- Calculate and display the Qibla direction from your current position
- Sync your prayer logs, bookmarks, dhikr counts, and preferences across devices
- Personalize your experience, such as displaying your prayer streak and reading progress
- Send account-related emails (verification, password reset) when requested
- Improve and maintain the Siraat platform
We never sell your data.
Your personal information is never sold, rented, or shared with third parties for marketing or advertising purposes. Your spiritual data belongs to you.
Data Storage & Security
Your data is stored in a PostgreSQL database with encrypted (SSL/TLS) connections to protect data in transit. We use industry-standard security measures to protect your information from unauthorized access, alteration, or destruction.
Authentication is handled through JSON Web Tokens (JWT). Passwords are securely hashed using bcrypt before being stored -- we never store plain-text passwords. Session tokens are short-lived and can be invalidated at any time.
While we implement robust security practices, no method of electronic transmission or storage is 100% secure. We continuously work to improve our security posture and protect your data.
Third-Party Services
Siraat uses a limited number of third-party services to operate:
Vercel: Our website is hosted on Vercel. Vercel may collect basic analytics data (page views, load times) to help us understand performance. No personally identifiable information is shared with Vercel beyond what is necessary for hosting.
Google Fonts: We use Google Fonts for typography. When you load a page, your browser may make requests to Google's servers to fetch font files.
We do not use any third-party analytics tracking services, advertising networks, or social media trackers beyond what is described above.
Your Rights
You have the following rights regarding your data on Siraat:
- Delete your account: You can request complete deletion of your account and all associated data at any time by contacting us.
- Export your data: You can request a copy of all personal data we hold about you.
- Opt out of emails: You can unsubscribe from any non-essential emails we send. Account-critical emails (such as password reset confirmations) may still be sent when you initiate those actions.
- Revoke location access: You can revoke location permissions at any time through your browser or device settings.
Cookies & Local Storage
Siraat uses minimal browser storage. We store your JWT authentication token in localStorage to keep you logged in between sessions. We do not use tracking cookies, advertising cookies, or any third-party cookie-based analytics. Your browsing activity on Siraat is not tracked across other websites.
Children's Privacy
Siraat is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to delete that information.
Contact Us
If you have any questions or concerns about this Privacy Policy, or if you wish to exercise any of your rights described above, please contact us at:
imamarham10@gmail.comChanges to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify users by posting the updated policy on this page with a revised "Last Updated" date. We encourage you to review this policy periodically to stay informed about how we protect your information.