Privacy Policy

Who we are and how to reach us

Jeel al-Khilafah is an Islamic educational project, devoted to spreading sound religious knowledge and tarbiyah resources among Muslim families.

For any matter relating to this policy, or any question about your data, please write to us through the contact form.

What data we collect

We collect the minimum we need to serve you. We do not ask for a date of birth, a gender, an address, or a payment card. What reaches us from you is:

• When you subscribe to the newsletter: your email address, nothing more.
• When you write to us through the contact form: your name, your email, the subject, and the body of your message.
• When you visit the site: your IP address and some ordinary browsing data (browser type, request time, requested page). The hosting layer receives these, and we use them to deliver the page and to prevent abuse.

We do not use analytics tools that track your behaviour (such as Google Analytics), and we do not run advertising tracking pixels.

Why we collect it

• Your email in the newsletter: to deliver the issues you have asked for, and to send the confirmation message by which you verify your subscription.
• Your name and message in the contact form: to read your question and reply to you.
• Your IP address: to prevent abuse and automated repeated requests, and so that the hosting provider can deliver the page to you.

The basis for all of this is your explicit consent when you fill in a form or click a confirmation button, alongside what is required to run the site safely.

Who processes it with us

We do not sell your data, and we do not share it with advertisers. However, running the site requires the help of specialised service providers, who handle your data on our behalf:

• Brevo: we use it to send the newsletter, confirmation messages, and contact-form replies. It receives your email address, and if you write through the contact form, your name and the body of your message as well.
• Cloudflare: our site runs on its infrastructure, which delivers pages to you and protects them from malicious software. Because it is the network layer for every visit, it processes your IP address and ordinary request data.
• Cloudflare Turnstile: a service for detecting automated software when forms are submitted. It is designed not to track you across sites, and usually does not show you puzzles.

Protecting the site from abuse

We use two techniques to protect the site and its users without imposing on you:

• Cloudflare Turnstile on the newsletter form and the contact form, to distinguish a human from an automated program. It does not ask you to identify yourself, and it does not record your browsing history.
• Rate Limiting: we hold your IP address temporarily in Cloudflare's memory so we can prevent repeated abusive requests. This memory is wiped automatically within a few hours.

Cookies and local storage

We do not use cookies for tracking or advertising, and we do not run analytics tools that monitor your behaviour. What may happen at most is:

• The Cloudflare Turnstile service may set a short-lived cookie while verifying that you are not an automated program.
• Your browser may save two small markers on your device (jeel_newsletter_pending and jeel_newsletter_confirmed) to remember the state of your subscription. These markers stay on your device, and we do not read them from our side.

You can clear these markers at any time from your browser settings.

How long we keep your data

• Your email in the newsletter list: it stays as long as you remain subscribed. If you unsubscribe, it is removed within a reasonable period after that.
• Contact messages: they remain in our inbox for as long as the conversation and a reasonable follow-up require.
• Subscription confirmation tokens: valid for 48 hours, then deleted automatically.
• Rate-limiting data (IP): held temporarily in a memory that is wiped automatically within a few hours.

International transfers

The service providers we rely on (Brevo and Cloudflare) operate distributed infrastructure across several countries, and your data may be processed in the European Union or elsewhere, according to how that infrastructure is laid out. These providers commit to approved contractual safeguards, which they publish on their websites.

Your rights over your data

At any time, you may:

• Ask us what data we hold about you.
• Ask us to correct anything that is mistaken.
• Ask us to erase your data from our records.
• Withdraw your consent to processing (for example by unsubscribing from the newsletter).
• Object to a particular processing, or ask us to restrict it.
• Ask for a copy of your data in a transferable format.

To exercise any of these, simply write to us through the contact form. We will do our best to reply as soon as we can.

Newsletter and unsubscribing

Every issue of our newsletter carries an unsubscribe link at its foot. A single click on it is enough to stop the newsletter from reaching you for good.

You may also write to us directly, and we will take care of unsubscribing you ourselves.

Children's data

The site is addressed to parents, educators, and adults in general. We do not knowingly collect children's data. If it turns out that a child has entered their data into one of our forms, let us know and we will erase it at once.

Data security

• All communications with the site are encrypted over HTTPS.
• Service keys and technical secrets are kept on the server side, and never appear in browser code.
• We aim to minimise as far as we can: we do not ask for what we do not need, and we do not keep what has served its purpose.

That said, absolute security on the internet cannot be guaranteed. We will do all we can to inform you if any incident affecting your data should occur.

Changes to this policy

We may update this page whenever the way we handle data changes, or whenever a new service is introduced. The "last updated" date at the top of the page points to the most recent change. If a material change touches your rights, we will let you know about it in our newsletter.

Contact us