Privacy Policy

Last updated: July 27, 2026

Istighfar.club is built privacy-first. This page describes everything the extension and website do with data. It is intentionally short, because we collect almost nothing.

What the extension never does

The extension never reads, stores, or transmits your browsing history, page content, URLs, keystrokes, or anything about the sites you visit. Reminder timing is computed entirely on your device. The extension requests only storage (to save your preferences and counts on your device), alarms (to schedule reminders), and activeTab (to read the current site’s name only when you use the pause-on-this-site button). It loads no remote code.

Activation and your email

Istighfar.club is free. To activate it you verify an email address: we send a one-time 6-digit code, and entering it starts your reminders. The extension contacts our own server at istighfar.club and nowhere else: to email the code, to activate the browser, once a day to re-check that the activation is still valid, and to back up your daily totals. That backup runs with the daily check, and in between at most once every six hours · and only when your totals have actually changed, so a day you count nothing sends nothing. No page content, URLs, or browsing data are ever sent.

Why the totals are backed up: so they survive. Before this they existed only in one browser, and a reinstall or a new computer took every count and the whole streak with it. The backup is one number per day · how many times you counted · and nothing about when, where, or on which site. It also lets a second browser pick up the same history once you activate it there. This only ever happens on a browser you have activated; without that, the extension sends nothing at all.

What we store: your email address, an opaque identifier for each activated browser, and an approximate location, being the country and city our hosting provider derives from the network connection of that request. We never store your IP address, and we never ask your browser for GPS or precise location. We use this to know how many people use Istighfar.club and roughly where, and to send you your verification code. We do not sell it, and we do not send marketing without your asking for it.

Write to mohdsami038@gmail.com at any time to see everything held against your email. Deleting it needs no email at all · there is a button on your dashboard, described below.

Data stored on your device

Your preferences (mode, goal, reminder interval, bubble position) and your daily Istighfar counts are stored locally in your browser. They never leave your device unless you sign in.

If you choose to back up

Backing up your counts is optional, and it uses the same verified email you activated with. There is no second account and no other login: if the extension is installed, the dashboard recognises you automatically. When you back up we store your daily count per date, your goal at the time, and that email address. That is the complete list. It lives in a MongoDB Atlas database and is used for nothing except showing you your own progress.

Aggregate totals

When someone backs up, we add the change in their count to two running totals: a single global number, and a tally per country. The country code comes from the network request at that moment and is never stored alongside your account or as an IP address. These totals are numbers only. They let us show a community counter and understand where the project is being used. If you never back up, you are never part of these totals.

Website analytics, no ads

The extension carries no analytics library and reports to no third party. It talks to one server, ours, for the two things described above: keeping your activation valid and backing up your daily totals. It does not watch what you do, follow you between websites, or build a profile of you. This website uses Vercel Analytics to count page views so we know whether the project is reaching anyone; it sets no cookies and does not follow you elsewhere either. There are no ads anywhere, and we never sell or share data.

Cookies, and why there is no banner

This site sets exactly one cookie: a signed token that says which email address you verified, so the dashboard recognises you without asking again. It holds no identifier beyond that address, it is not read by anyone else, and it is what the law calls strictly necessary · a cookie without which the thing you asked for cannot work. Those need no consent banner, which is why there is not one.

We would rather say that plainly than put a banner up. A consent box implies there is tracking to consent to, and on a site that does none it would be friction pretending to be care. If we ever add a cookie that is not strictly necessary, this paragraph changes and a banner appears with it.

Terms

What is promised, what is expected, and how to leave is set out on the terms page.

Deleting your data

Cloud data: open your dashboard and press Delete my data. It removes your membership and every activated browser, every day of counts, your lifetime total, and any unused verification code, immediately and for good. Nothing is kept and nothing needs to be asked for. The shared counter on the home page keeps its total, because it is a sum with no names in it and your part cannot be subtracted without keeping exactly the record you just destroyed.

Local data: remove the extension, or clear it from the extension’s options. Or simply never sign in, and no cloud data will ever exist.

Contact

Questions: mohdsami038@gmail.com