Introduction
Mawkib Shabab Al Askaryayn ("MSAA," "we," "us," or "our") operates the MSAA community website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.
Information We Collect
Personal Information
When you sign in using Google OAuth, we collect:
- Your name and email address (provided by Google)
- Your profile picture (avatar)
- A unique user identifier assigned to your account
Content You Create
We store content that you voluntarily submit, including:
- Discussion forum posts and replies
- Votes on discussion posts
- Timestamps associated with your activity
Automatically Collected Data
We do not use cookies, analytics trackers, or logging mechanisms beyond standard session management required for authentication.
How We Use Your Information
We use the collected information solely for:
- Authenticating your identity and managing your account
- Enabling you to participate in discussion forums
- Moderating content to maintain community standards
- Displaying prayer times sourced from a third-party API
- Communicating with you regarding your account or community participation
Third-Party Services
Our website integrates with the following third-party services:
Google OAuth
We use Google OAuth for authentication. When you sign in, Google shares your name, email address, and profile picture with us. We do not receive or store your Google password. Review Google's Privacy Policy atpolicies.google.com/privacy.
Hetzner (Server Hosting)
Our website and database are hosted on servers provided by Hetzner, a German hosting provider. All data described in this policy is stored on Hetzner's infrastructure. Review Hetzner's Privacy Policy athetzner.com/legal/privacy-policy.
Aladhan Prayer Times API
Prayer times are fetched in real-time from the Aladhan.com API. No personal data is sent to this service; only the city and country (Calgary, Canada) are transmitted. Review their policy ataladhan.com/privacy-policy.
Data Storage and Security
Your data is stored in a PostgreSQL database hosted on Hetzner servers, with encryption in transit (TLS) and at rest. We implement reasonable administrative, technical, and physical security measures to protect your information. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.
Data Retention
We retain your account information and content for as long as your account remains active. If you request account deletion, we will remove your personal information and anonymize or delete your posts and comments within a reasonable timeframe. Session data is deleted when you sign out or when an administrator bans your account.
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal obligations)
- Withdraw consent for data processing at any time
- Export your data in a portable format
To exercise any of these rights, please contact us using the information below.
Children's Privacy
Our website is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete such information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page. Continued use of the website after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through the community channels listed on our website or reach out to an administrator directly.