Privacy

Last updated 24 September 2026

Dua Society collects as little as it can. There are no ads, no advertising or analytics trackers, no fingerprinting scripts, and we never sell data.

What we store

Account: your email, display name, and a securely hashed password. Email is used only for verification, password reset, and security messages.
Your posts: dua requests, comments, and updates, and whether you chose to show your name or post anonymously.
Made dua: that an account (or, for visitors without one, an anonymous device identifier) made dua on a request, so a repeat tap is not counted twice.
Country only: for “Around the World” we count participants by country, using the coarse country hint our CDN provides. The country (a two-letter code, never a precise location) is also kept with each made-dua so a request can show how many countries have prayed for it; it is never shown with a name. Countries with very few participants are not shown separately.
Abuse prevention: a one-way hash of your network address is used to limit spam and to recognise an anonymous poster's repeat submissions. The address itself is not stored.
Anonymous posting: a private management key is kept in your browser (and stored only as a hash on our side) so you can edit or delete an anonymous post.

Cloudflare delivers the site and sees ordinary web traffic.
Automated moderation: post text may be sent to a content-safety service (OpenAI's Moderation API) to check it against our rules.
Amazon SES delivers our account emails.

One functional cookie keeps you signed in (it is not readable by scripts). We set no tracking or advertising cookies.

Delete any request or comment you posted.
Delete your account from the Account page: your email, name, and password are erased and all sessions end. Posts you have not deleted stay, shown as anonymous, unless you remove them first.
Backups are kept for a limited time (14 days) and then discarded.