Back to Returning Heart

Effective September 17, 2026

Privacy Notice

How Returning Heart uses location data, newsletter subscriptions, and services that support the site.

Newsletter subscriptions

Subscribing is optional and requires explicit consent and a confirmation link sent to your email. We store your email, language, confirmation date, consent version, provider contact ID, and subscription status in a private database. We do not collect names, health information, or browsing history for this feature.

Email stays in signup memory. The confirmation capability is delivered in an email link fragment, cleared from the address bar on opening, and held in page memory only. It is not saved in browser storage, application logs, or analytics; the confirmation page does not load analytics. Pending verification records expire after 15 minutes and are removed hourly. Confirmed records remain while subscribed; D1 opt-out records are removed after 30 days. Database recovery copies and provider message history follow their own retention periods.

To limit unwanted confirmation emails, we also keep a secret-keyed identifier for each requested address and delivery attempt times. These abuse-prevention records contain no readable email address and expire after 48 hours, with hourly cleanup.

Unsubscribe through any newsletter to stop future updates. For complete deletion, reply to a newsletter with your request so we can remove your contact and pending signup records. Resend may retain delivery history according to its policy.

Location permission and purpose

When you first visit, the site asks your browser for your current location because prayer times depend on where you are. The browser or operating system controls the native permission prompt; the site cannot change its wording.

If you allow access, the location is used only to identify your area and calculate prayer times. If you decline, block, or cannot use location access, the site continues with its existing fallback and manual city selection.

What is stored

Precise current-location coordinates are kept transiently in the page while they are needed and are not written to localStorage. The saved preference for current location records only that mode.

If you select a city manually, the site stores the city and country labels and coordinates rounded to three decimal places (about 110 metres of latitude) so your selection can be restored. Legacy saved values are reduced to this precision when read. You can remove these preferences by clearing this site’s data in your browser.

Requests, logs, and analytics

Coordinate-bearing requests to this site use encrypted POST bodies rather than URL query strings. The application does not log those request bodies. This prevents coordinates from appearing in page URLs, referrers, or URL-based analytics.

Prayer calculations use the live coordinates for the current session and send them to our server without placing them in the URL. The server rounds coordinates to four decimal places before contacting AlAdhan. Reverse geocoding uses three-decimal-place coordinates. These reductions preserve practical prayer-time and city accuracy while limiting unnecessary precision.

Infrastructure and external providers may retain operational records under their own policies. Their current notices are linked below.

Your choices

You can allow, deny, or later revoke location access through your browser or operating system. You can use the manual city option at any time. Clearing this site’s storage removes the saved city and other local preferences.

Services we use

Cloudflare Turnstile and D1

When you open signup, Cloudflare Turnstile runs invisible verification in the background and processes challenge and ordinary network information to prevent automated abuse, as described in Cloudflare’s Turnstile Privacy Addendum linked below. Your email is stored privately in Cloudflare D1 only for signup confirmation and consent records. No location or health information is collected for the newsletter.

Resend

Resend sends confirmation links and newsletters and manages unsubscribe preferences. It receives your email and confirmed subscription status. Provider message history follows its retention policy. You can unsubscribe using the link in any newsletter.

Cloudflare Email Routing and Gmail

If you email updates@returningheart.com, Cloudflare Email Routing forwards your message to our monitored Gmail inbox. The sender address and message content are stored there separately from subscriber records and do not follow the D1 retention schedule. Google's privacy policy applies to Gmail processing.

Nominatim / OpenStreetMap

Reverse geocoding turns reduced-precision coordinates into a city and country. Requests are sent by our server, so Nominatim receives our server’s network address rather than yours.

Open-Meteo

Manual city searches are sent through our server. Open-Meteo receives the city search text and our server’s network address, not your browser’s IP address.

AlAdhan

Prayer schedules are requested through our server. AlAdhan receives coordinates rounded to four decimal places, the selected calculation method and madhab, and the requested calendar period. It does not receive your browser’s IP address from this request.

Sanity

Sanity provides public editorial content and media. Requests for Sanity-hosted content or assets may include ordinary network information such as an IP address, as described in Sanity’s policy. Location coordinates are not sent to Sanity.

Cloudflare and Cloudflare Web Analytics

Cloudflare helps deliver and protect the site. When enabled, Cloudflare Web Analytics measures page and performance activity without cookies or localStorage and states that it does not collect or use visitors’ personal data. Location coordinates are never placed in page or API URL query strings.