Privacy Policy

Who we are

Siraj Noor is an open-source (MIT-licensed), non-commercial 3D Qur'an and Hadith companion built by a single developer for the Quran Foundation Hackathon 2026. It runs entirely in your browser as a static site - there is no Siraj Noor backend that receives your data.

What we store in your browser

When you sign in with your Quran.com account, we store the following in localStorage on your device only:

• Your OAuth 2.0 access and refresh tokens from Quran Foundation
• A temporary PKCE verifier and state value during the sign-in redirect
• Your preferred sort order for the Surah Ring (a UI preference)

These values never leave your device. Signing out clears them immediately. We do not use cookies and we do not run any analytics, tracking pixels, or advertising scripts.

What is stored on your Quran Foundation account

Any personal feature you use - bookmarks, collections, reading sessions, streaks, and reflections - is sent directly from your browser to the Quran Foundation User API at apis.quran.foundation. This data lives on your Quran Foundation account, governed by Quran Foundation's own privacy policy. Siraj Noor never receives, stores, or forwards this data.

To delete this data, revoke Siraj Noor's access from your Quran.com account settings or use the Quran Foundation account deletion flow - that action removes everything Siraj Noor can see about you.

Third parties your browser talks to

• Quran.com API (api.quran.com) - public, keyless content: verse text, translations, transliteration. No authentication, no cookies.
• Quran Foundation OAuth (oauth2.quran.foundation) - sign-in and token refresh.
• Quran Foundation User API (apis.quran.foundation) - your personal data, as described above.
• Hadith API (fawazahmed0/hadith-api via jsDelivr CDN) - public hadith text. No authentication.
• CARTO - dark-themed map tiles for the Revelation Map view. No authentication.
• Cloudflare Pages - static hosting. Cloudflare may log standard HTTP request metadata (IP, user agent, timestamp) for abuse prevention, per their own privacy policy.

Children

Siraj Noor is not directed at children under 13. We do not knowingly process any personal data from children. Parents who believe a child has signed in should revoke Quran Foundation access from that account.

Contact

Questions, concerns, or corrections: open an issue at github.com/billkhiz-bit/siraj-noor/issues.