Privacy Policy

What we collect

If you only view prayer times, we do not ask for anything. No account, no tracking scripts, no advertising network. The cookies the site does set are listed below and none of them follow you.

If you register, we store your name, email address and a bcrypt hash of your password. We never store the password itself and cannot recover it.

If you administer a mosque, we store the mosque details you enter: name, address, coordinates, timezone, calculation settings, contact details and announcements. This is published deliberately — it is what makes the mosque findable.

We record the time and IP address of sign-in attempts. This is used only to throttle brute-force attacks and is deleted after 30 days.

We count visits to each mosque page, so that a committee can see whether their page is being used. The count is a single number per mosque per day, incremented and nothing more. No address, no browser details, no identifier of any kind is stored against it, and there is no way to work backwards from it to a person or a visit. Looking up prayer times is a record of religious practice, and we do not keep one.

Cookies

Four, none of them for tracking:

• A session cookie, set when you sign in or open a form that needs protecting against forged requests. It expires after two hours of inactivity.
• A "remember me" cookie, only if you tick the box. It lasts 30 days and is revoked when you sign out or change your password.
• A small flag recording that this browser belongs to someone with an account, so that a committee refreshing their own page is not counted as a visitor. It holds no identity and authorises nothing.
• Your light or dark theme choice, kept in your browser's local storage and never sent to us.

What we do not do

• We do not sell or rent personal data
• We do not run advertising or third-party tracking
• We do not build profiles of worshippers
• We do not share congregation data with anyone

Third parties

Nothing on this site is loaded from a third party. Typefaces, stylesheets, scripts and images are all served from salaada.com itself, so no outside provider sees your IP address as a consequence of a page loading. There are no analytics scripts, no advertising tags and no social media embeds.

Your rights

You may request a copy of your data, correct it, or ask for your account and its mosque records to be deleted. Write to info@salaada.com and we will respond within 30 days.

Security

Traffic is served over HTTPS. Passwords are hashed with bcrypt. Database access uses prepared statements throughout. Sessions expire after two hours of inactivity. No system is perfectly secure, and we do not claim otherwise.