1. Who We Are
Islam.wiki is operated by Ummat, an Islamic technology organization (501(c)(3) application pending). We operate islam.wiki, an authoritative Islamic knowledge base covering Quran, Hadith, Seerah, biographies, and classical Islamic scholarship.
Data controller: Ummat — [email protected]
2. What We Collect
Data you provide:
- Account information: email address and display name when you create an account.
- Bookmarks and reading history: Quran ayahs, hadith, articles, and people pages you save, to sync across your devices.
- Contributions: wiki edits, article submissions, and corrections you submit (attributed to your account or anonymously per your choice).
Data collected automatically:
- Search queries: search terms entered, to improve search relevance. Not linked to your identity unless you are signed in.
- Usage data: pages visited, features used, session duration.
- Device information: device type, OS version, browser type and version.
- IP address: used for rate limiting and geographic routing. Not stored beyond 30 days in server logs.
We do not sell your data. We do not build advertising profiles.
3. How We Use It
- Deliver Quran, Hadith, Seerah, and Islamic reference content.
- Sync bookmarks, reading history, and preferences across your devices.
- Improve search results and content quality.
- Send transactional emails (account verification, password reset).
- Detect and prevent abuse, spam edits, and security incidents.
- Comply with applicable law.
GDPR lawful basis: contract performance, legitimate interests (security, quality improvement), legal obligation.
4. Who We Share With
We share data only with these service providers:
| Vendor | Purpose | Country / Safeguard |
|---|
| Hetzner Online GmbH | Server hosting | Germany (EU) |
| Vercel Inc. | Web hosting | USA/EU — SCCs |
| Cloudflare Inc. | CDN, DNS | USA/EU — SCCs |
| Elastic Email Inc. | Transactional email | USA/EU — SCCs |
Full sub-processor list: ummat.pro/legal/sub-processors
5. Your Rights
- Access — request a copy of all data we hold about you.
- Correct — ask us to fix inaccurate data.
- Delete — request deletion of your account and data.
- Port — receive your data in a machine-readable format.
- Restrict / Object — limit or object to certain processing.
GDPR / UK-GDPR: Articles 15–22 apply. Response within 30 days. CCPA/CPRA: we do not sell your data.
Email: [email protected]
6. Children
Islam.wiki is not directed at children under 13 (US) or under 16 (EU). We do not knowingly collect data from minors below these ages. Contact [email protected] if you believe a child has provided data.
7. Retention
- Account and bookmark data: until deletion + 30-day grace period.
- Server logs (incl. IP): 30 days.
- Wiki contribution history: retained indefinitely (part of the public record, associated with username or anonymized).
- Anonymized analytics: up to 24 months.
8. International Transfers
Our servers are in Falkenstein, Germany (EU) via Hetzner. Some providers operate in the USA; transfers are covered by Standard Contractual Clauses (EU 2021/914, Module 2).
9. Security
TLS 1.3 for all data in transit, encryption at rest for sensitive fields, role-based access control. Security disclosures: [email protected]
Recent Updates (2026-04-25)
The following changes reflect P3 platform decisions that took effect April 2026:
- Analytics — PostHog removed: PostHog is no longer used on any Ummeco product (decision D-P3-21). Islam.wiki uses only self-hosted Umami for privacy-preserving, cookieless analytics. Umami does not fingerprint users or share data with third parties.
- AI features: Islam.wiki does not currently use AI processing that sends personal data to external AI providers. This policy will be updated if AI features are added.