Privacy

Sakīna is built to store as little as possible: no ads, no trackers, no third-party services in your browser. This page says exactly what is stored.

Controller

The controller’s details are added by the operator in the admin settings.

Principles

What the service does not need is not stored. No cookies for recognition, no fingerprinting, no sharing with third parties. Fonts and scripts are served from Sakīna’s own server.

Account

Email, display name, password (only as an Argon2id hash), language, time zone, appearance and playback settings – so that Sakīna works for you. Security logs keep IP addresses only in shortened form.

Location

Voluntary and only for prayer times: place, coordinates rounded to about 1 km and time zone. The device location is requested once, only after your tap; there is no continuous tracking. The place search uses Sakīna’s own list of places, without an external service.

Listening history

For “continue” and variety Sakīna stores what you listened to (can be switched off in the settings, deleted automatically after 90 days).

Access links & sharing

Access links are random keys; only their hash is stored. Sharing creates a new link with its own anonymous listening progress (only surah, position, period – no name, no IP).

Listening statistics

To show how often something was heard and shared, the player reports small events (opened, started, seconds heard, title finished).

• The IP address is only used at the moment of the request: for the country (local database, no external service) and for a daily hash with a key that is replaced every day and then discarded. It is not stored.
• Stored per listening session: link, country (e.g. “DE”), day, context and seconds heard – for signed-in listeners the account.
• Not stored: IP addresses, cities or coordinates of anonymous listeners, browser identifiers, cookies or IDs for recognition.
• Session data is deleted after 365 days; after that only aggregated daily numbers without personal reference remain.
• Link previews (e.g. WhatsApp, iMessage) and bots do not count as listening.

Autoplay diagnostics

To understand problems with automatic start, the player sends one anonymous summary per visit (browser family and version, system, outcome, timing). No IP, no full user agent; deleted after 30 days.

Storage in your browser

Only what is technically necessary: session cookie and “stay signed in” (sign-in), language, appearance and time zone (so pages display correctly and routines are planned in your local time), the playback position on this device. No analytics cookies – hence no cookie banner.

Legal bases

Art. 6(1)(b) GDPR (providing the service for your account), Art. 6(1)(f) GDPR (security, anonymous reach and error statistics; legitimate interest in a stable, simple service), § 25(2) no. 2 TDDDG (only strictly necessary storage in the browser). Web hosting in Germany (data processing agreement).

Your rights

Access, rectification, erasure, restriction, objection and data portability; complaint to a data protection supervisory authority. You can change or delete your settings, location and listening history yourself at any time.

Sources

Audio: IslamHouse.com. Places: GeoNames (CC BY 4.0). IP-to-country: IP Geolocation by DB-IP (CC BY 4.0). Country names: Unicode CLDR.