Privacy Policy

Table of Contents

📋

Information We Collect

We collect the following types of information:

Information you provide:

• Account information (username, email address, password hash)
• Profile details (display name, biography, avatar)
• Content you submit (place suggestions, reviews, event submissions)
• Contact form messages
• Support correspondence

Information collected automatically:

• IP address (hashed for analytics, stored in full only for security purposes)
• Browser type, operating system, device type
• Pages visited, search queries within the site
• Language, theme, and layout preferences (via cookies)
• Referrer URL and session duration

Information from third parties:

• If you sign in via Google OAuth: your Google account name, email address, and profile picture
• Prayer times data from the Aladhan public API (no personal data involved)
• Map coordinates from OpenStreetMap / Google Maps when you submit a place

🎯

How We Use Your Information

We use your information to:

• Operate and improve the platform (place directory, prayer times, events, blog)
• Authenticate your account and maintain security
• Send transactional emails (account verification, password reset, notifications you opt into)
• Detect, prevent and respond to fraud, abuse, and security incidents
• Analyse aggregate, anonymised traffic patterns to improve the site
• Comply with legal obligations
• Respond to support requests and inquiries

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. The site may display contextual advertisements via Google AdSense; these are not based on your personal data.

🤝

Information Sharing

We share your information only in the following circumstances:

• Service providers: Hosting, email delivery (SMTP), and analytics tools that process data on our behalf under strict confidentiality agreements.
• Legal requirements: When required by law, court order, or governmental authority.
• Safety: To protect the rights, property, or safety of Swala Axis, our users, or the public.
• Business transfer: In the event of a merger or acquisition, personal data may be transferred with full notice to users.

Public information you submit (place names, reviews, event listings) is visible to all visitors by design.

🍪

Cookies & Local Storage

We use the following cookies and browser storage:

• Session cookie — keeps you logged in securely (HttpOnly, Secure)
• Language preference — remembers your chosen language (1-year cookie)
• Theme & layout preferences — remembers your appearance settings
• Cookie consent — remembers whether you accepted or rejected analytics cookies
• Analytics cookies (if you accept) — anonymised traffic analysis via Google Analytics

You can disable cookies in your browser settings. Disabling session cookies will prevent you from logging in. Preference cookies only affect your visual experience.

🗄️

Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Public content (places, reviews): May be retained for the integrity of the directory even after account deletion, in anonymised form.
• Security logs: IP-based security logs retained for 30 days.
• Analytics: Aggregated, anonymised data retained for up to 180 days.
• Support emails: Retained for 2 years for dispute resolution.

🔒

Data Security

We implement industry-standard security measures including:

• All passwords stored as bcrypt hashes — never in plain text
• HTTPS (TLS) enforced for all connections via HSTS
• CSRF protection on all forms
• Session fixation and hijacking prevention
• Rate limiting on authentication and API endpoints
• Two-factor authentication (2FA) available for admin accounts
• Regular security audits and dependency updates

No method of transmission over the internet is 100% secure. We strive to protect your data but cannot guarantee absolute security.

👤

Your Rights

Depending on your location, you may have the following rights under GDPR, CCPA, or applicable law:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Restriction: Request limited processing of your data
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

🧒

Children's Privacy

Swala Axis is not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it promptly.

🔗

External Links

Our site contains links to third-party websites (Google Maps, OpenStreetMap, mosque websites, etc.). We are not responsible for the privacy practices of these sites and encourage you to review their policies.

🌍

International Data Transfers

Your information may be stored and processed in any country where we or our service providers operate. By using the site, you consent to the transfer of information to countries that may have different data protection rules than your country. Where required, we rely on standard contractual clauses or other approved transfer mechanisms.

📝

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a prominent notice on the site or by email. Continued use of the site after changes take effect constitutes acceptance of the revised policy. The "Last updated" date at the top reflects the most recent revision.

✉️

Contact Us

For privacy-related inquiries, data requests, or concerns:

Swala Axis
Email: [email protected]
Website: https://www.swalaaxis.com