Privacy Policy
We take the protection of your personal data very seriously. Below we inform you about the collection of personal data when using our website.
Data Controller
Ahmet Devrim Kölner Str. 369 40227 Düsseldorf Email: devrim@weboola.com
Data Collected
During registration we collect: username and email address. During platform usage, we additionally store: reading progress, created and joined Hatims, and friend lists.
Legal Basis
Your data is processed based on Art. 6(1)(b) GDPR (contract performance) for providing the platform, and Art. 6(1)(f) GDPR (legitimate interest) for improving our service. Due to the thematic focus of this platform (communal Quran reading), information about religious interests may be inferred from your usage behavior. We do not store your religious affiliation as a separate data field. Any processing within the meaning of Art. 9 GDPR is based on Art. 9(2)(e) GDPR (data manifestly made public by the data subject through their own registration).
Cookies and Local Storage
This website exclusively uses technically necessary cookies (authentication via JWT) and local storage (language setting, theme preference). No tracking or analytics cookies are used.
Third-Party Services
We use the following processors (Art. 28 GDPR) to provide our platform: • Hetzner Online GmbH (Hosting): The platform runs on servers operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre within the EU. A data processing agreement under Art. 28 GDPR is in place with Hetzner. • Brevo (brevo.com): We use Brevo (formerly Sendinblue), operated by Sendinblue SAS, 7 rue de Madrid, 75008 Paris, France, to send verification emails. Your email address is transmitted to the provider. Legal basis: Art. 6(1)(b) GDPR (contract performance). A data processing agreement under Art. 28 GDPR is in place with Brevo. Brevo Privacy Policy: https://www.brevo.com/legal/privacypolicy/ • Quran.com audio CDN (audio.qurancdn.com): When playing Quran recitations, audio files are loaded from the qurancdn.com CDN (Quran.com, USA). Your IP address is transmitted to the CDN operator in the USA. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing the audio feature). For the third-country transfer to the USA we rely on Art. 49(1)(b) GDPR (contract performance).
Data Retention
Your data is stored as long as your account exists. After account deletion, your personal data will be deleted within 30 days.
Your Rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection (Art. 21 GDPR). You can contact the competent supervisory authority at any time.
Changes
We reserve the right to update this privacy policy to reflect changes in the legal situation or changes to the service.
Last updated: May 2026