Last updated: 29 October 2026
In short: Thawabak needs no account, we don't sell your data, and we show no ads. We only keep what you write yourself in khatmas, dua requests and messages, plus what's needed to protect the site from abuse. We use Google Analytics to see, in numbers, how the site is used, such as how many people visit and which pages they open most.
This policy explains what data Thawabak (thawabak.com) handles, and how we use and protect it.
1. Information you write yourself
- Khatmas: the khatma name, who it's for, the message to participants, the creator's name if given, and the names participants enter when reserving a juz. Anyone with the khatma link can see this.
- Dua requests: the request text, who it's for, and a name if given. These requests are public and visible to every visitor.
- Contact messages: the message, plus your name and email if you give them. They are saved in the site's database and a copy is sent to the team's inbox, and only the Thawabak team can see them. The same goes for emails you send to info@thawabak.com.
Please don't write private or sensitive details, such as phone numbers, addresses or specific medical information, in khatmas or dua requests.
2. Technical information
- IP address: we don't store it as is. We turn it into a one-way code that can't be reversed, and use it only to prevent spam and limit repeated attempts. These rate-limit records are deleted automatically within two days.
- Server logs: our hosting provider, Cloudflare, keeps temporary request logs, such as the time and browser type, for security and operations.
- Usage statistics (Google Analytics): we use Google Analytics to understand how the site is used and to improve it. Google collects data such as the pages you open, how long you stay, the site you came from, your approximate country and city, your device, browser and language, and clicks on external links. To do this, Google uses cookies and a random identifier for your browser. We only see aggregated numbers that don't identify any visitor.
To keep khatmas private, we never send Google the link, name or dedication of any specific khatma, or any admin code: all khatma pages are counted as one generic page. The text of dua requests and messages is not sent to Google, and Google Analytics doesn't run on the admin page.
3. What stays on your device only
The site uses your browser's local storage to remember: the city you chose, the name you typed, your list of khatmas, the reservation and admin codes for your khatmas, the dua requests you said “Ameen” to, and a random code for your device. We can't see this data, except the codes sent when you take an action: a reservation or admin code when you change a khatma, and the random code with “Ameen” and “Report” so a vote isn't counted twice. You can delete all of it by clearing the site's data in your browser settings.
4. Location
We only ask for your location if you tap “Use my location”. Prayer times are calculated on your device, and the coordinates are stored on your device only. They are never sent to us.
5. Cookies
- Google Analytics cookies: such as
_ga, which Google uses to tell visitors apart and count visits. We don't use them for advertising. - Cloudflare cookie: Cloudflare may set a strictly necessary cookie to protect the site from attacks and bots.
If you'd rather your visits weren't counted in Google Analytics, you can install the Google Analytics opt-out add-on in your browser, or block cookies for this site in your browser settings. The site keeps working fully either way.
6. How we use information
- To run and display khatmas and dua requests.
- To reply to your messages.
- To protect the site from spam and abuse, and to review reported content.
- To see which sections are used most and improve the site, from aggregated Google Analytics statistics.
We don't sell data, we don't share it with anyone for marketing, and we don't link Google Analytics to any advertising service.
7. Who processes the data
- Cloudflare hosts the site and its database, and delivers our email. See the Cloudflare privacy policy.
- Google (Gmail) is where we receive contact messages and email sent to info@thawabak.com. See the Google privacy policy.
- Google Analytics: Google processes usage data, possibly on servers outside your country. See how Google uses information from sites that use its services. Google keeps detailed visitor data for two months and then deletes it; aggregated numbers remain.
- Fonts, images and files load from Thawabak's own servers.
- When you open external links, such as Quran.com or WhatsApp, those sites' policies apply.
8. How long we keep data
- A khatma stays until its creator deletes it from the admin link, or until we remove it for breaking our terms.
- Dua requests and messages stay until we delete them, and you can ask us to delete anything you wrote.
9. Your rights
You can ask to see, correct or delete your data through our contact page. Because the site has no accounts, we may ask for details that help us find the content, such as the khatma link or the request text.
10. Children
The site is meant for the general public, and we don't knowingly collect personal data about children. If a child has written personal details on the site, a parent or guardian can ask us to delete them.
11. Changes to this policy
We may update this policy when the way the site works changes, and we'll update the “Last updated” date above. Continuing to use the site after an update means you accept it.
12. Contact us
For any privacy question, write to us through our contact page or at info@thawabak.com.