Privacy

What we keep, and who sees it.

There are no accounts on Dua Lock. Here is everything we do keep, and why.

Your duas

• What you write, the category you chose, and — if you add them — who it is for and your first name. Public: that is what a wall is for. Please keep other people to a first name and leave out anything private.
• Your country, only if you show it. It is taken from your connection (Cloudflare tells us the country, never anything finer), and you can untick it before sharing.
• Ameen and reports you make, linked to your device key so each device counts once. Nobody sees who said Ameen or who reported what.

Your device key

When you share a dua or say Ameen, your browser gets one cookie: a random key, stored on our side only as a hash. It is how the wall knows a dua is yours, so you can take it down from that device. It does not identify you and is not shared. A second cookie remembers your language, if you choose one.

The Dua Lock app

Which apps you lock or open never leaves your phone. The leaderboard shows two totals — duas read and tasbih counted — under the name you choose, or as “Someone”, until you switch it off in the app; switching it off hides you here straight away. The app's full policy is here.

Counting visits and stopping abuse

• Page views: the page, the site that sent you, your country, the kind of device (phone, tablet or computer), the site's language, and a code made from your connection that changes every day — so nobody can be followed from one day to the next. Kept for at most 13 months.
• Counts of actions: how many times a day things happen — the app downloaded, the wall searched, a dua shared, feedback sent — as totals per day, with nothing that says who did them.
• Limits against spam: short-lived counters keyed to that daily code or to your device key, deleted as they expire.

Google Analytics

We also use Google Analytics to understand how the site is used: which pages are visited, how people arrive, and roughly where from and on what kind of device. It sets its own cookies (named _ga) and sends that information to Google, which keeps it under its own retention settings; Google Analytics does not store IP addresses. Visitors in the European Economic Area, the United Kingdom and Switzerland are asked first, through Google's consent message: until you agree, no Analytics cookie is set, and Google receives at most basic signals without cookies, such as that a page was viewed. You can change your choice with Privacy choices at the foot of every page, or turn Google Analytics off in your browser with Google's opt-out add-on. How Google uses this data: policies.google.com/technologies/partner-sites.

Advertising

Some pages show ads from Google AdSense, in clearly labelled spaces — never among duas or next to Ameen. Google and its partners use cookies and similar technologies to show ads, to measure them, and — where you allow it — to make them more relevant to you. Visitors in the European Economic Area, the United Kingdom and Switzerland are asked for consent first, through Google's consent message; you can change your choice at any time with Privacy choices at the foot of every page.

You can learn how Google uses information from sites that show its ads at policies.google.com/technologies/partner-sites, and turn off personalised ads at adssettings.google.com. Nothing we keep about you is given to advertisers.

Messages you send us

The Feedback page keeps what you write, the kind of message, your language, and — only if you add them — your name and an email address to reply to. Only the administrators read it; nothing is published or shared, and messages are deleted after a year, or sooner if you ask.

Gifts through PayPal

If you choose to support the team on the Support our mission page, the payment is made with PayPal, under PayPal's privacy statement. Your card or bank details go to PayPal, never to us. Our site keeps no record of the gift; the team sees it in its PayPal account, with the name and email address PayPal shares with anyone you pay.

Cloudflare hosts the site and its database; that is who handles the data on our behalf.

Taking your dua down

On the device you shared it from, open your dua and choose Take down my dua. The words and the name are erased straight away. Lost the device? Write to hello@the-world-wall.com with the link to the dua, and we will take it down.

The people who run it

Moderators can see duas held back for review and the reasons people gave in reports. The only email addresses we keep are the administrators' own.

Questions: hello@the-world-wall.com · Wall guidelines · Terms