Privacy Policy

1. Overview & Data Controller Identification

This Privacy Policy explains in detail how Prayertimesriyadh.com (“we”, “our”, or “the Website”) collects, processes, protects, and stores information when you access or interact with our digital platform, calculations, prayer timetable tools, and related Islamic educational services.

Website Name: Prayer Times Riyadh
Official Domain: https://prayertimesriyadh.com
Operational Jurisdiction: Riyadh, Kingdom of Saudi Arabia
Data Privacy Officer Contact: [email protected]

By browsing or using our platform, you acknowledge and agree to the data collection and processing practices described within this policy. If you do not agree with these terms, please discontinue use of the Website.

2. Information We Collect

We believe in the fundamental principle of data minimization: we do not collect personal information that is unnecessary to deliver accurate, localized prayer times and religious utilities.

A. Personal Information Provided Voluntarily

You can access our prayer times, Hijri calendar converter, Qibla compass, and Zakat calculator without registering an account or providing any personal identity documents. The only personal information we collect is data you voluntarily submit when communicating with us:

• Contact Inquiries: When you send a message through our Contact Us page, we collect your name, email address, message subject, and the contents of your inquiry.
• Purpose of Processing: This correspondence information is utilized solely to respond directly to your technical support request, feedback, or factual correction inquiry. We never add your contact information to unsolicited marketing newsletters or sell it to third-party brokers.

B. Automatically Collected Technical Data & Server Log Files

Like standard web publishers worldwide, our hosting servers automatically record standard technical log entries when your browser communicates with our servers. These log files include:

• Internet Protocol (IP) address (anonymized/truncated for analytical processing).
• Browser name, build version, and rendering engine.
• Operating system and device hardware classification (desktop, mobile, tablet).
• Referring URL (the web page from which you arrived) and exit URL.
• Date and time stamps of requests and individual pages viewed.
• Internet Service Provider (ISP) and HTTP response status codes.

Legal Basis & Purpose: Server logs are processed under our legitimate interest to ensure server security, prevent distributed denial-of-service (DDoS) attacks, detect bot abuse, and diagnose technical server anomalies.

C. Local Device Preferences & Client Settings

To provide a tailored experience, our client-side software remembers your chosen display configurations locally on your device:

• Selected calculation authority (default: Umm Al-Qura University, Makkah).
• Selected juristic school for Asr prayer (default: Shafi/Hanbali).
• Selected geographic district within Riyadh for localized time adjustments.
• Interface language (Arabic or English).
• Audio preference for prayer call notifications (mute/unmute).

3. Cookies & Local Storage Technologies

Cookies are small text files placed on your computer or mobile device when visiting websites. LocalStorage is a browser-based storage mechanism that holds lightweight preference strings without transmitting them across the network on every request.

Our website utilizes a limited number of first-party functional cookies strictly required for core user preferences:

How to Control and Disable Cookies

You have the absolute right to accept, refuse, or delete cookies at any time through your browser settings. If you choose to disable cookies, our core prayer schedule remains completely accessible, though your custom method preferences may reset between visits.

To adjust cookie settings, consult your browser’s dedicated support documentation:

• Google Chrome Cookie Settings
• Apple Safari Cookie Settings
• Mozilla Firefox Cookie Settings
• Microsoft Edge Cookie Settings

4. Google AdSense & Third-Party Advertising Disclosures

In accordance with Google AdSense Publisher Policies, we provide explicit notice regarding third-party vendors and digital advertising technologies operating on our platform:

• Third-Party Vendor Notice: Third-party vendors, including Google, use cookies to serve advertisements based on a user’s prior visits to Prayertimesriyadh.com or other websites across the Internet.
• Google Advertising Cookies: Google’s use of advertising cookies (including the DoubleClick cookie) enables it and its certified partners to serve relevant advertisements to our visitors based on their visit to our site and/or other sites on the World Wide Web.
• Personalized vs. Non-Personalized Ads: Advertisements may be personalized based on generalized demographic factors or previous browsing history. Where required by regional privacy regulations (such as within the European Economic Area or under age-sensitive guidelines), non-personalized ads are served based solely on the current page content and context.

Consumer Opt-Out Links for Personalized Advertising

You have the right to opt out of personalized interest-based advertising at any time through the following industry opt-out portals:

• Google Ad Settings: Users may opt out of personalized advertising directly through Google Ads Settings (adssettings.google.com).
• Digital Advertising Alliance (DAA): Manage third-party advertising cookies via the AboutAds Consumer Choice Page (aboutads.info/choices).
• Network Advertising Initiative (NAI): Opt out of participating advertising networks at the NAI Consumer Opt-Out Portal (networkadvertising.org).
• European Interactive Digital Advertising Alliance (EDAA): European visitors may manage advertising consent at Your Online Choices (youronlinechoices.com).

Note: Opting out of personalized advertising does not mean you will see fewer advertisements; rather, the advertisements you encounter will be contextual and not tailored to your individual browsing habits.

5. Google Analytics (GA4) Disclosures

This Website uses Google Analytics 4 (GA4), a web analysis service provided by Google LLC, to understand how visitors interact with our prayer timetables and educational tools. Google Analytics uses cookies to collect aggregated, non-identifying telemetry data.

• Measurement ID: Our website uses the measurement tag G-5KB38TXS0E.
• Information Captured: Telemetry includes session durations, page view counts, bounce rates, general geographic region (city-level: e.g., Riyadh, Jeddah, international), device resolution, and language settings.
• IP Anonymization: In Google Analytics 4, IP addresses are automatically masked and dropped before data is logged, ensuring that individual IP addresses are not stored or associated with personal profiles.
• Data Retention: User-level and event-level data stored in Google Analytics is configured to the minimum retention window of 14 months, after which it is automatically purged.
• Opt-Out Mechanism: You can completely disable Google Analytics tracking across all websites by installing the official Google Analytics Opt-out Browser Add-on.

6. External APIs & Data Sources (Aladhan API)

Accurate astronomical calculation is fundamental to our service. To compute daily prayer times, Islamic solar angles, and Hijri calendar conversions, our application communicates with the Aladhan API:

• Server-to-Server Architecture: All API requests are executed strictly from our web server to the Aladhan API endpoints via server-side PHP (`wp_remote_get`). Your personal browser never connects directly to Aladhan’s servers.
• Zero PII Exposure: No personal identification details, user cookies, or visitor IP addresses are ever transmitted to Aladhan API. Requests convey only the city name (“Riyadh”), country code (“SA”), and astronomical calculation parameters.
• Server Caching: Timetable results are cached in WordPress transients for 12 hours (daily schedules) and 30 days (Hijri conversions), minimizing external network calls and maximizing browsing speed.

7. Compliance with the Saudi Personal Data Protection Law (PDPL)

As a digital service tailored to Riyadh, Kingdom of Saudi Arabia, Prayertimesriyadh.com complies fully with the Saudi Personal Data Protection Law (PDPL), enacted under Royal Decree No. (M/19) and overseen by the Saudi Data and Artificial Intelligence Authority (SDAIA).

Your Statutory Rights under the Saudi PDPL:

• Right to be Informed: You have the right to know our legal justification and purpose for collecting any personal data.
• Right of Access: You have the right to request a copy of any personal data we hold concerning you (e.g., historical contact form records).
• Right to Rectification: You may request the correction, updating, or completion of any inaccurate personal data.
• Right to Destruction / Erasure: You have the right to request the permanent deletion of your personal data when it is no longer required for the purpose for which it was gathered.
• Right to Withdraw Consent: You may withdraw your consent to data processing at any time without adverse consequences.

Statutory Response Window: In full alignment with SDAIA executive regulations, we review and process verified PDPL requests within thirty (30) business days, without charging any fee.

8. Compliance with European Privacy Regulations (GDPR)

If you access this Website from within the European Union (EU) or the European Economic Area (EEA), you possess specific rights under the General Data Protection Regulation (Regulation (EU) 2016/679 – GDPR):

• Legal Basis for Processing: We process technical server logs under Legitimate Interests (Article 6(1)(f)) for platform security, and contact form details under Consent (Article 6(1)(a)).
• Data Subject Rights: You have the right to access (Article 15), rectify (Article 16), erase (Article 17), restrict processing (Article 18), obtain data portability (Article 20), and object to processing (Article 21).
• Right to Lodge a Complaint: You have the right to lodge a formal complaint with your local EU Data Protection Supervisory Authority if you believe our data processing violates statutory obligations.

9. California Privacy Rights (CCPA / CPRA)

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents are entitled to specific disclosures:

• No Sale of Personal Information: We do NOT sell, rent, release, disclose, disseminate, or transfer your personal information to third parties in exchange for monetary or valuable consideration.
• No Sharing for Cross-Context Behavioral Advertising: We do not share personal information with third parties for cross-context behavioral advertising outside the standard contextual advertising programs detailed above.
• Consumer Rights: California residents have the right to request disclosure of categories of data collected, the right to request deletion of personal information, and the right not to be discriminated against for exercising privacy rights.

10. Children’s Online Privacy Protection (COPPA)

Safeguarding young people online is paramount. Prayertimesriyadh.com is a general-audience informational utility designed for families, worshippers, and students of Islamic timings. We do not direct content specifically to children under the age of 13, nor do we knowingly collect or solicit personal data from children under 13 (or under 18 in jurisdictions where parental consent is statutory).

If we discover that a minor under 13 has submitted personal contact details without verified parental consent, we will promptly and permanently expunge that information from our servers. Parents or guardians who believe a child has provided data may contact us immediately at [email protected].

11. Data Security & Technical Safeguards

We implement comprehensive organizational and technical security measures to protect the integrity of our digital infrastructure:

• Transport Layer Security (TLS/HTTPS): All data transmissions between your browser and our servers are encrypted using high-grade 256-bit SSL/TLS cryptographic protocols.
• Server Hardening: Firewalls, automated brute-force defenses, intrusion detection systems, and strict least-privilege administrative access protocols are enforced.
• Zero Financial Storage: We do not process payments, store credit card numbers, or hold financial accounts. Our Zakat Calculator runs purely on client-side JavaScript within your own browser without sending financial figures to any server.

12. Data Retention Schedules

We maintain strictly defined data retention timelines based on the necessity of processing:

• Contact Form Communications: Messages and associated email addresses are retained for up to twelve (12) months to maintain correspondence history, after which they are securely purged.
• Server Log Files: Raw access and error logs are automatically rotated and overwritten within thirty (30) to ninety (90) days.
• Analytical Data (GA4): Aggregated analytics telemetry is permanently deleted after fourteen (14) months.
• Client Preferences: First-party preference cookies expire automatically after twelve (12) months unless cleared manually by the user earlier.

13. Modifications to this Privacy Policy

We reserve the right to revise, update, or amend this Privacy Policy periodically to reflect technological changes, modifications to our digital services, updates to Google AdSense guidelines, or statutory amendments to applicable privacy laws.

Any revisions will be posted directly to this page with an updated “Last Modified” timestamp. We encourage visitors to review this policy periodically to remain informed about our data protection standards.