Privacy Policy

Bookmarks, your last-read position, and reading preferences (text sizes, theme, translation and Tajweed toggles) are written to your browser's localStorage under the keys mushafly.bookmarks.v1, mushafly.lastRead.v1 and mushafly.settings.v1.

This data never leaves your browser. It is not transmitted to us or to anyone else, and there is no sync or backup. You can inspect it in your browser's developer tools, and delete it at any time with Settings → Local data, or by clearing site data for this address.

Mushafly sets no cookies, no tracking pixels, no advertising identifiers and no social media embeds.

Page views are counted with Vercel Web Analytics, which is cookieless. It records the address of the page, the referring page, a coarse location derived from the connection, and the browser, operating system and device type. It keeps no identifier that survives the day: its visitor hash is discarded after 24 hours, so a reader cannot be followed from one day to the next, or across sites.

Nothing you type or save is ever sent — no bookmark, no label, no reading position, no search term. The app records no custom events, and no advertising, profiling or data sharing is involved.

This measurement runs only when the site is served by Vercel, which is the host of this copy; on a copy hosted anywhere else it is inert. Blocking it changes nothing about reading.

This site. Pages, styles, scripts, fonts and the derived search index are served from the host you are reading from. As with any web server, that host can see your IP address, user agent, the page you requested and the time of the request, and may keep access logs.

Recitation audio. Verses are read aloud from MP3 files on raw.githubusercontent.com, and only when you press play. Those requests go directly from your browser to GitHub, so GitHub sees your IP address and user agent and handles that data under GitHub's privacy statement. Reading, search, bookmarks and settings require no such request.

Page counting. The measurement described above is fetched from this same address, under /_vercel/insights/…, and only when Vercel serves the site. Vercel sees the request as any host would see a request for a page it serves; more detail is in Vercel's own privacy documentation.

Nothing else. No other third-party scripts, no remote fonts, no CDNs beyond the host serving this site. When you follow an external link, including the source-data links in Settings, the destination site's own policy applies.

We hold no personal data about you, so there is nothing for us to delete, export or correct on our side. Everything Mushafly knows about your reading lives on your device and stays under your control.

Blocking storage entirely is supported: the reader, search and navigation keep working, and only bookmarks and saved preferences are unavailable for that session.