Privacy Policy

1. Information We Collect

1.1 Information You Provide

The Quran Navigator is a read-only reference platform. We do not require account creation, login, or registration. We do not directly collect personally identifiable information (PII) such as your name, email address, phone number, or payment details.

1.2 Automatically Collected Information

When you visit our platform, certain technical information is automatically collected by our web server and third-party services:

• IP address (anonymized after 24 hours)
• Browser type, version, and operating system
• Referring URL and exit pages
• Pages visited and time spent
• Device type (desktop, tablet, mobile)
• Country-level geographic data (derived from IP)
• Date and time of access

1.3 Local Storage

Our PWA (Progressive Web App) functionality may store minimal data in your browser's localStorage, such as installation preferences (e.g., whether you dismissed the install banner). This data remains on your device and is not transmitted to our servers.

2. How We Use Information

We use automatically collected information for the following legitimate purposes:

• Platform operation: Ensuring the website functions correctly and securely
• Analytics: Understanding aggregate usage patterns to improve content and performance
• Security: Detecting and preventing unauthorized access, fraud, or abuse
• Legal compliance: Fulfilling obligations under applicable law
• Advertising: Displaying contextual advertisements through Google AdSense (see Section 3)

We do not sell, rent, or trade your information to third parties for their direct marketing purposes.

3. Third-Party Services

3.1 Google AdSense

This platform uses Google AdSense to display advertisements. Google AdSense uses cookies and similar tracking technologies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this site and/or other sites on the Internet.

You may opt out of personalized advertising by visiting Google Ad Settings or aboutads.info.

3.2 Google Fonts

We load fonts from Google Fonts (fonts.googleapis.com). Google may collect IP address and browser data when fonts are loaded. See Google's Privacy Policy.

3.3 Quranic Structural Dataset

The Quranic structural metadata presented on this platform is independently curated, verified, and published by Kanz ul Ilm International under the scholarly supervision of Mufti Syed Muhammad Usman Bukhari, Director and Lead Researcher. No user data is collected, shared, or transmitted in connection with the academic dataset.

3.4 Hosting Infrastructure

This platform may be hosted via services including Cloudflare (CDN and DDoS protection) and server infrastructure. These providers may process IP addresses and technical data as data processors under appropriate data processing agreements.

4. Cookies & Tracking Technologies

4.1 Types of Cookies

• Strictly Necessary: Service worker caching for offline PWA functionality. Cannot be disabled as they are essential for operation.
• Functional: localStorage items for user preferences (e.g., install banner dismissal).
• Advertising: Google AdSense cookies for ad delivery and frequency capping. May be used for personalized advertising.
• Analytics: If analytics services are enabled, cookies to measure page visits anonymously.

4.2 Cookie Control

You can control cookies through your browser settings. Disabling cookies may affect the functionality of advertisements but will not impair core academic features of this platform. EU/UK users will be presented with a cookie consent notice where required by law.

5. Children's Privacy (COPPA Compliance)

We do not knowingly collect personally identifiable information from children under the age of 13 (or the applicable age of digital consent in your jurisdiction). The platform does not include user registration, comment systems, or any feature that would collect personal data from minors.

If you are a parent or guardian and believe your child has inadvertently provided personal information, please contact us immediately at the address in Section 11, and we will promptly delete such information.

While we take steps to ensure advertising is appropriate, if you believe your child has been shown inappropriate content through third-party advertising, please report this to us and to Google via the AdSense reporting tools.

6. Your Rights

6.1 GDPR Rights (EU/UK Residents)

Under the General Data Protection Regulation, you have the right to:

• Access: Request a copy of data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure ("Right to be Forgotten"): Request deletion of your data
• Restriction: Request restricted processing of your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time without affecting prior processing

Our legal basis for processing automatically collected data is Legitimate Interests (Art. 6(1)(f) GDPR) for platform security and operation, and Consent for advertising cookies.

6.2 CCPA Rights (California Residents)

Under the California Consumer Privacy Act, you have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information held by us
• Opt-out of the sale of personal information. Note: We do not sell personal information.
• Non-discrimination for exercising your CCPA rights

6.3 PIPEDA Rights (Canadian Residents)

Under Canada's Personal Information Protection and Electronic Documents Act, you have the right to access personal information we hold about you and to challenge its accuracy.

To exercise any of these rights, please contact us at the address in Section 11. We will respond within 30 days (GDPR) or 45 days (CCPA).

7. Data Retention

We retain automatically collected server log data for a maximum of 90 days, after which it is deleted or permanently anonymized. IP addresses are anonymized within 24–48 hours.

Data held by third-party services (Google AdSense, Google Fonts) is subject to their own retention policies, which are governed by their respective privacy policies.

Browser-based data (localStorage, service worker cache) is retained until you clear your browser data or uninstall the PWA.

8. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• HTTPS/TLS encryption for all data in transit
• HTTP Security Headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options)
• Regular security reviews of our codebase
• Minimal data collection by design
• CDN-level DDoS protection

No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

9. International Data Transfers

This platform is operated by Kanz ul Ilm International, based in Pakistan. Information collected may be processed in countries outside your country of residence, including the United States and European Union, by our service providers (Google, Cloudflare).

For transfers from the European Economic Area (EEA), we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) as implemented by our third-party processors. Google LLC's data transfers are covered by their EU-U.S. Data Privacy Framework certification.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When material changes are made, the revised policy will be published at this URL. We encourage you to review this policy periodically.

Continued use of the platform following the publication of a revised policy constitutes your acceptance of the updated terms.