Privacy policy

We collect as little as we can, sell nothing and show no adverts. Here is everything you need to know.

Last updated: 16 October 2026

Who we are

Noor for All (noorforall.com) is a free learning site run from the United Kingdom. For privacy matters, write to privacy@noorforall.com.

Without an account

You can read and listen to the whole library and try the talking board without an account. Anything you save then (the last ayah you read, board settings, words you add) stays in your browser on your device and never reaches us.

What we keep when you create an account

Your account: name, email and your password in hashed form (we never see your password).
If you choose “Continue with Google”: Google gives us only your name, email and Google account number. We never get your Google password or contacts.
Learner profiles you add: the name you choose (a first name is enough), the type, the language and the settings you pick, such as button size, calm mode and how the learner communicates. We never ask for a diagnosis.
Progress: the surahs, ayahs, lessons, Names and duas each learner has learned, and time spent learning.
Your child's own words on the talking board: the word, and the photo or voice recording if you add them. They are kept on our server and only your account can see them.
Questions you send to Ask Noor.
Security logs: for each request the server records the IP address and the page asked for, to protect the site from abuse. These logs are deleted on a rolling basis.

Emails

We send account emails only: confirming your email and resetting your password. They are sent through our email provider, Resend. We send no marketing emails.

Films and visit counts

Our films are on YouTube. The YouTube player (from youtube-nocookie.com) loads only when you press “Watch the film”, and YouTube's privacy policy applies from then on. We count visits with GoatCounter running on our own server, with no cookies and no tracking of people.

Cookies

We use strictly necessary cookies only, so there is no consent banner:

noor_token: keeps you signed in, for 30 days; pages cannot read it.
noor_li: tells pages you are signed in (no personal data), 30 days.
noor-active-profile, noor-active-audience: which learner is using the site now, 1 year.
noor-lang: your chosen language, 1 year.
noor_oauth_state: only during Google sign-in, 10 minutes.

Where data is kept

On our server at Hetzner in Nuremberg, Germany (EU), with daily backups on servers we control.

Children

Accounts are created by a parent or carer; children do not sign up themselves. A child's profile holds only what the parent enters.

Your rights

At any time you can download all your data, or delete your account and everything in it for good, from the Your data page. You can ask us to correct any data, and you can complain to the UK Information Commissioner's Office (ICO).