Privacy Policy

This policy applies to visitors, registered contributors, and administrators who use the Islamic Resource Corner website. It covers information collected through account registration, resource browsing and downloads, uploads, the contact form, optional donations, and technical operations required to run the site.

This website does not currently integrate third-party advertising or analytics platforms (such as Google Analytics) in its application code. Download counts are stored in aggregate at the resource level, not as a per-user activity log.

Islamic Resource Corner, operated as a service of Al-Kisa Foundation, is responsible for personal information processed through this website. Questions or requests may be sent to info@islamicresourcecorner.com.

Information you provide

• Account data: email address, password (stored hashed by our auth provider), first name, last name, username, country, and occupation/role when you register as a contributor.
• Uploaded resources: titles, descriptions, taxonomy tags, file metadata, preview images, credits/copyright information, and files you submit for review.
• Contact messages: name, email address, optional subject, and message content submitted through our contact form.
• Communications: content of emails we send for account confirmation, password reset, and other transactional notices.

Information collected automatically

• Authentication cookies: session tokens managed by Supabase to keep you signed in securely.
• Country preference cookie (irc_country): a two-letter country code stored for up to 30 days to show an appropriate donation campaign.
• Network and device data: IP address, browser type, and request metadata processed by our hosting provider for security, routing, and (where available) country detection via standard hosting headers.
• Download statistics: when a resource file is downloaded, we increment an aggregate download counter on that resource. We do not store which individual user performed each download in the application database.

Public profile information

Contributor profiles (such as username, display name, and email) may appear on approved resource pages so users can identify who shared a resource. Profile rows are readable by authenticated and unauthenticated visitors as configured in our database policies.

• Provide, secure, and maintain accounts and contributor features.
• Review, publish, and deliver educational resources.
• Respond to contact and support requests.
• Send transactional emails related to authentication and account security.
• Route optional donation forms based on approximate region.
• Protect against abuse, fraud, and unauthorized access.
• Comply with legal obligations and enforce our Terms of Service.

• Contract: processing needed to provide the service you request (accounts, uploads, downloads).
• Legitimate interests: site security, abuse prevention, aggregate usage metrics, and donation routing, balanced against your rights.
• Consent: where required for non-essential cookies or optional third-party embeds you choose to interact with.
• Legal obligation: when we must retain or disclose information under applicable law.

We do not sell your personal information. We share data only as described below:

• Service providers that help us operate the website (see Section 7).
• Other users and the public for approved resources and public contributor attribution.
• Legal and safety when required by law, court order, or to protect rights, safety, and integrity of the service.
• Organizational affiliates within the Al-Kisa Foundation ecosystem where necessary to operate IRC.

We rely on the following categories of providers to run IRC:

• Supabase — Authentication, database, and application infrastructure. Typical processing location: United States (AWS us-west-2). Provider privacy information
• Resend — Transactional email delivery (account and contact messages). Typical processing location: United States. Provider privacy information
• Google (Google Drive / Cloud) — Secure storage and delivery of approved resource files. Typical processing location: United States and global Google data centers. Provider privacy information
• Vercel (or equivalent hosting provider) — Website hosting, edge routing, and geolocation headers for donation routing. Typical processing location: United States and global edge locations. Provider privacy information
• Zeffy — Optional donation forms when you choose to donate. Typical processing location: United States / Canada. Provider privacy information
• Start Infinity — Optional embedded feedback form on the Contact page. Typical processing location: Third-party service; see provider policy. Provider privacy information
• geojs.io — Approximate country lookup from IP when hosting headers are unavailable (donation routing only). Typical processing location: Third-party service. Provider privacy information

When you interact with embedded donation (Zeffy) or feedback (Start Infinity) tools, those providers may collect information under their own policies.

• Account and profile data is kept while your account is active and as needed afterward for legal, security, or backup purposes.
• Published resources remain available until removed by you or administrators, subject to backup retention by infrastructure providers.
• Contact form submissions are retained as long as needed to respond and maintain operational records.
• Authentication logs and security records may be retained by our providers according to their standard retention schedules.

We use industry-standard measures including encrypted connections (HTTPS), authenticated access controls, row-level database security policies, and server-side file access controls for Google Drive–backed resources. No method of transmission or storage is completely secure; please use a strong, unique password and notify us promptly of suspected unauthorized access.

IRC is operated from the United States. If you access the site from outside the U.S., your information may be processed in the U.S. and other countries where our service providers operate. Where required, we rely on appropriate safeguards such as standard contractual clauses offered by vendors or equivalent mechanisms.

Depending on your location, you may have the right to:

• Access personal information we hold about you.
• Correct inaccurate information.
• Delete your account and associated profile data, subject to legal exceptions.
• Object to or restrict certain processing.
• Withdraw consent where processing is consent-based.
• Port data you provided in a structured format where technically feasible.

California residents (CCPA/CPRA): We do not sell or share personal information for cross-context behavioral advertising. You may request access, deletion, or correction by contacting us. We do not discriminate against you for exercising privacy rights.

EEA/UK: You may lodge a complaint with your local supervisory authority. We encourage you to contact us first so we can address your concern.

To exercise rights, email info@islamicresourcecorner.com. We may need to verify your identity before fulfilling requests.

IRC provides educational materials that may be used by teachers, parents, and students. Account registration is intended for users who can provide a valid email and accept our Terms. We do not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction) without appropriate parental consent. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy when our practices, technology, or legal requirements change. We will revise the “Last updated” date and, where appropriate, provide additional notice on the website.