Privacy policy

In short

• No accounts and no sign-in. That does not make your use fully anonymous: we collect the technical data described here, and the contact form asks for your name and email.
• When your assistant uses mutqin's tools, only the tool request reaches us (such as a surah and ayah number, or search words), never your whole conversation.
• Web server logs hold your IP address, the address requested and your browser type; they are deleted after 7 days, and so is their copy in the monitoring system. The server programs' own logs are limited by size, with no fixed deletion deadline.
• We count visits with Google Analytics through Cloudflare; in the EU, the EEA, the UK and Switzerland only after you agree. See "Visit statistics".
• Contact form messages arrive in our mailbox and are kept there for 180 days; the server does not keep them.
• We do not sell data, show ads, or share data except with the service providers named here.

What this page covers

This page covers the whole of mutqin.dev: its pages, the library and hadith pages, the demo, the contact form, and the mutqin tools server at https://mutqin.dev/mcp that your AI assistant connects to.

Your AI assistant (such as Claude or ChatGPT) is another company's service. It reads your conversation and decides when to call mutqin's tools and what to send them; your conversation is covered by that company's privacy policy, not by this page.

Who is responsible for your data

mutqin is run by PIXELIQUE OÜ, a company registered in Estonia, which is responsible (the controller) for the personal data described on this page. Where this page says "we", it means this company.

• Legal name: PIXELIQUE OÜ
• Registry code: 16659635 (Estonian Business Register)
• Address: Tornimäe tn 5, Kesklinna linnaosa, Tallinn 10145, Harju maakond, Estonia
• Contact: info@mutqin.dev

What the mutqin server receives from your assistant

When your assistant calls a tool, it sends us the tool's name and its inputs only: for example a surah and ayah number, an edition, search words, a book and page number, or a hadith number and a language. Your whole conversation, your name and your account with the assistant do not reach us.

The server keeps no sessions and no history of your questions, and we do not routinely log the content of tool requests. But when a tool fails we log the error so we can fix it, and that error log can include what you asked for (such as a hadith number and language) or other input details contained in the error.

We count the calls to each tool, their outcome (success or failure) and their duration, as numbers without IP addresses or content, to monitor the service.

The request itself takes the same path as every visit, so it appears in the web server logs described next, without its content.

Server logs

The web server (nginx) logs every request it receives: the time, the site name, your IP address as passed on by Cloudflare, the request method, the address requested including anything after the question mark, the result, the size, the duration, your browser's or program's description (User-Agent), and the page you came from.

The address requested includes library search words, because they are part of the link. The content of submitted requests (such as tool inputs or a contact form message) is not logged by the web server.

These logs are rotated daily and only the last 7 rotated files are kept, so each entry is deleted after 7 days (at most 8, counting the day it is written).

These logs are also copied into the monitoring system on our server and kept there for 7 days (and at most 5 GiB). Before they are stored there, we apply pattern-based masking: we look for the usual forms of passwords, tokens, keys and email addresses and mask them. This masking does not anonymize the logs and does not guarantee that every sensitive value is removed; IP addresses and search links remain.

The server programs' own logs (start-up and errors, including tool errors) are kept in the system journal (journald), which is limited by size (2 GB) rather than by time: the oldest entries are deleted when it is full, and there is no fixed deletion deadline.

Monitoring

We monitor the service on our own server: numbers about requests (by site and result class), response times, tool calls and server health. These numbers carry no IP addresses and no content, and are kept for 15 days.

Only the person who runs mutqin can see the monitoring dashboards and logs, behind a login. Nothing leaves the server except alert emails to our mailbox, which name the problem, not visitor data.

Cloudflare

Every request to mutqin.dev passes through Cloudflare first, which protects and speeds up the site. So Cloudflare sees your IP address and your request, may check the request to stop attacks, and may ask your browser to report connection failures to it.

Cloudflare keeps its own logs under its own privacy policy and retention periods, not under this page.

Visit statistics and cookies

We count visits to the site's pages with Google Analytics 4, run through Cloudflare Zaraz: it loads from mutqin.dev itself, and Cloudflare's servers send the data to Google, not your browser directly.

The statistics receive: the full page link, which can include search words, the page title, the page you came from, your screen and window size, the page encoding, your time zone offset, and a visitor identifier. Google keeps this data under its own policy and retention periods.

If you visit from the European Union, the European Economic Area, the United Kingdom or Switzerland, or we cannot tell where you are, Google Analytics runs only after you agree in the banner. Until you agree, or if you reject, it does not load at all: no statistics are sent and none of the cookies below are set.

Elsewhere it runs without asking, and you can turn it off the same way. You can change your choice at any time with "Cookie settings" at the bottom of every page; rejecting deletes these cookies and reloads the page without Google Analytics.

To decide whether to ask, the site checks the country of your connection, as Cloudflare reports it; this check is not stored.

When Google Analytics runs, it sets these cookies on the mutqin.dev domain, as we found them on 13 November 2026:

• cfz_google-analytics_v4: a random visitor identifier and engagement times, for one year.
• cfzs_google-analytics_v4: a session counter, deleted when the browser closes.
• cf_zaraz_client: a cookie for Zaraz itself, for one year.

Your choice, accept or reject, is kept in your browser (in localStorage) and is not sent to us; it holds for six months or until you clear your browser's site data. After that, in the countries where consent is required you are asked again; elsewhere Google Analytics runs again as it does for any visitor there, and "Cookie settings" at the bottom of every page turns it off at any time. If your browser does not let the site store your choice, Google Analytics stays off. The site works fully without these cookies.

To have the statistics about your visits deleted, write to us before you reject, with the value of the cfz_google-analytics_v4 cookie (it identifies your browser to Google Analytics); without it we can only delete by date.

If you switch between light and dark mode, your browser remembers your choice itself (in localStorage); it is not sent to us.

The contact form and email

If you write to us with the form, we receive: your name, your email, the topic, the message, the ayah and edition if you add them, the page language and the time sent.

The form is protected by Cloudflare Turnstile, which tells people from automated programs. Your browser sends the check's signals to Cloudflare, and our server sends the check's result and your IP address to Cloudflare to verify it.

The message is sent as an email through our email provider (Hostinger) to info@mutqin.dev, with your address as the reply-to. The server does not keep the message, and its log records only the outcome and the topic, never your name, address or message. To protect the form from flooding, we count submission attempts, not only successful messages: 5 attempts per IP address in 10 minutes, and 100 attempts from all visitors together per hour. The per-IP counters stay in memory until they expire and are cleared by periodic cleanup.

The message is kept in our mailbox for 180 days from when it arrives and then deleted; we delete it sooner if you ask. The same applies if you email us directly.

What our server fetches from other sites

Some texts are fetched by our server from their publishers the first time they are asked for, and a copy is kept:

• Translations of the meanings of the Quran from QuranEnc: our server sends only the translation code and the surah number.
• Hadith translations and explanations from the hadith encyclopedia named on the sources page (/sources/): our server sends only the hadith number and the language.
• The tafsir database from the Tafsir Center for Quranic Studies: downloaded once from where the Center publishes it, a fixed version that is checked. The hosting site receives a fixed download request, with no data about users.

The providers of these texts receive what our server requests (a translation code and surah number, or a hadith number and language) and our server's network information (its address and its software description). We do not pass on your IP address or your conversation.

What we do not do

• No accounts, no passwords, no profiles of visitors.
• We do not sell or rent data.
• No advertising and no ad tracking.
• We share data only with the service providers named on this page, or when the law requires it.

Who sees the data

Inside mutqin: only the person who runs the service. Outside it: Cloudflare (network, protection, the form check and statistics), Google (statistics), Hostinger (email), and the hosting provider whose server runs the service. These may be in a country other than yours.

Your rights and deletion

You can ask us what data we hold about you, ask for a copy, a correction or deletion, by writing to info@mutqin.dev. We answer as soon as we can.

Because we do not know visitors by name, to find a log entry about you we usually need your IP address and the approximate time. Web server logs and their monitoring copy are deleted automatically after 7 days; the system journal deletes its oldest entries when it is full.

Children

Browsing the site and using the tools need no account. We still collect the technical data described above, and contacting us requires a name and email; this also applies when children use the service. If a child writes to us with the form and a parent or guardian asks us to delete the message, we delete it.

Changes to this page

If what we collect or how long we keep it changes, we update this page and the "Last updated" date at the top.