Privacy Notice

Newsletter subscriptions

Subscribing is optional and requires explicit consent and a confirmation link sent to your email. We store your email, language, confirmation date, consent version, provider contact ID, and subscription status in a private database. We do not collect names, health information, or browsing history for this feature.

Email stays in signup memory. The confirmation capability is delivered in an email link fragment, cleared from the address bar on opening, and held in page memory only. It is not saved in browser storage, application logs, or analytics; the confirmation page does not load analytics. Pending verification records expire after 15 minutes and are removed hourly. Confirmed records remain while subscribed; D1 opt-out records are removed after 30 days. Database recovery copies and provider message history follow their own retention periods.

To limit unwanted confirmation emails, we also keep a secret-keyed identifier for each requested address and delivery attempt times. These abuse-prevention records contain no readable email address and expire after 48 hours, with hourly cleanup.

Unsubscribe through any newsletter to stop future updates. For complete deletion, reply to a newsletter with your request so we can remove your contact and pending signup records. Resend may retain delivery history according to its policy.

Location permission and purpose

When you first visit, the site asks your browser for your current location because prayer times depend on where you are. The browser or operating system controls the native permission prompt; the site cannot change its wording.

If you allow access, the location is used only to identify your area and calculate prayer times. If you decline, block, or cannot use location access, the site continues with its existing fallback and manual city selection.

What is stored

Prayer reminders use your browser’s notification permission. The enabled setting and individual prayer choices stay in this browser until site data is cleared and are never sent to our servers. Reminders contain the prayer name, which may appear on your lock screen. Keep the site open and active; delivery may be delayed in background tabs and stops when the site is closed. You can disable reminders in Prayer Times settings or revoke permission through your device or browser.

When you mark a prayer or Sunrise as undone in Prophetic Practices, the site saves that choice and its date only in this browser. The checklist resets at Fajr in your selected location. Previous choices are discarded when the site next recognizes that a new Fajr cycle has begun. These choices are never sent to our servers.

If you choose not to see the music player’s zero-volume warning again, that choice is saved only in this browser until you clear this site’s data. Reduce Motion and Auto-Play Audio choices are also saved only in this browser. These preferences contain no personal data, are never sent to our servers, and can be removed by clearing the site’s data.

Precise current-location coordinates are kept transiently in the page while they are needed and are not written to localStorage. The saved preference for current location records only that mode.

If you select a city manually, the site stores the city and country labels and coordinates rounded to three decimal places (about 110 metres of latitude) so your selection can be restored. Legacy saved values are reduced to this precision when read. You can remove these preferences by clearing this site’s data in your browser.

Requests, logs, and analytics

Coordinate-bearing requests to this site use encrypted POST bodies rather than URL query strings. The application does not log those request bodies. This prevents coordinates from appearing in page URLs, referrers, or URL-based analytics.

Prayer calculations use the live coordinates for the current session and send them to our server without placing them in the URL. The server rounds coordinates to four decimal places before contacting AlAdhan. Reverse geocoding uses three-decimal-place coordinates. These reductions preserve practical prayer-time and city accuracy while limiting unnecessary precision.

Infrastructure and external providers may retain operational records under their own policies. Their current notices are linked below.

Your choices

You can allow, deny, or later revoke location access through your browser or operating system. You can use the manual city option at any time. Clearing this site’s storage removes the saved city and other local preferences.

Services we use

Cloudflare Turnstile and D1: Turnstile processes verification and network information to prevent automated signup abuse under its privacy addendum. Cloudflare D1 privately stores email, confirmation, and consent records; the newsletter collects no location or health data.

Resend: Sends confirmation emails and newsletters, receiving your email and confirmed subscription status. Unsubscribe in any newsletter; message history follows Resend’s retention policy.

Cloudflare Email Routing and Gmail: Cloudflare Email Routing forwards messages to updates@returningheart.com to our Gmail inbox. Sender addresses and message content are stored separately from subscriber records under Google’s policy, outside D1’s retention schedule.

Nominatim / OpenStreetMap: Identifies your city and country from reduced-precision coordinates. Requests come from our server, so the service receives our server’s IP address rather than yours.

Open-Meteo: Provides manual city search results using your search text and our server’s IP address, rather than your browser’s IP address.

AlAdhan: Calculates prayer schedules using coordinates rounded to four decimal places, your calculation method and madhab, and the requested period. Requests use our server’s IP address.

Sanity: Delivers public content and media. Asset requests may include ordinary network information, such as your IP address, under Sanity’s policy; location coordinates are never sent.

Cloudflare and Cloudflare Web Analytics: Delivers and protects the site. When enabled, Web Analytics measures page activity and performance without cookies or localStorage and states it does not collect or use visitors’ personal data. Coordinates never appear in page or API URLs.