Privacy Policy

Islamic Center of Longmont (ICL), also known as Masjid Al Huda, is a registered 501(c)(3) non-profit religious organisation in Longmont, Colorado (Tax ID 33-1335330). This policy covers the website at https://icl-huda.org. It does not cover our social media accounts, or any third-party site we link to.

Visit counts, through Google Analytics. When you load a page, Google Analytics receives which page it was (its address only: never a search you typed, and never the private links in the emails we send you), the page you came from, your browser and device type, your approximate location (city level, worked out by Google from your connection; Google says it does not store the IP address itself), and whether you completed one of our sign-ups: a newsletter sign-up, a volunteer or iftar request, or a question to a scholar. For donations it records only that the giving section was seen, which suggested amount was pressed and that you left for the giving platform. It never receives your name, email, phone number, the words of a question or anything else you type.

We use these counts for one thing: to see whether people find the masjid through Google, including the free ads Google gives charities through its Ad Grants program, and to report that back to Google Ads as a count of completed sign-ups. We have turned off Google signals and ad personalisation, so this site is not used to build advertising profiles or audiences, and we keep the data for 14 months. Google processes it under its own terms as our analytics provider. There is no A/B testing tool and no session recording, and we do not build a profile of you.

If your browser sends the Global Privacy Control signal (a setting in browsers such as Firefox, Brave and DuckDuckGo, and in some privacy extensions), Google Analytics does not load at all and your visit is not counted.

Our fonts are served from our own server rather than from a font network, so loading a page does not announce your visit to a third party.

Like any website, our hosting provider keeps short-lived technical server logs (typically the requesting IP address, the page requested, and the time), which exist to keep the site running and to defend against abuse. We do not use them to identify individuals and we do not combine them with anything else.

This is what happens while you browse. Sending something through Ask a Scholar, one of the forms or the newsletter sign-up is different; see the two sections below.

Google Analytics sets two cookies on this site, _ga and _ga_C6L6HDREFP. They hold a random number, so that a second visit counts as a return visit rather than a new visitor, and they expire after two years. To stop them, turn on Global Privacy Control in your browser, block cookies for this site, or use Google’s opt-out browser add-on (tools.google.com/dlpage/gaoptout); the site works the same either way. The service that hosts the site, Azure App Service, adds two of its own, ARRAffinity and ARRAffinitySameSite: they send your next request to the same server, carry nothing about you and are deleted when you close your browser. We set no other cookies. Three things are saved in your browser’s local storage, and nothing else: your light/dark choice under the key icl-theme; on the Qur’an pages, your reading preferences and place under icl-quran-prefs (text size, reading mode, translation, playback settings, the last ayah you were reading and your reading plan); and if you close a site notice, its id under icl-dismissed-announcements so it stays closed on your next visit. None of it ever leaves your device, none of it is sent to us, and clearing your browser data removes all three.

Ask a Scholar sends your question to a person at the masjid. To do that, and to send the answer back, we ask for your name and email address and store them with the question. They are visible only to the people at ICL who review questions, never on the site. When the site can send email, nothing goes to a scholar until you open the confirmation link we send you, and a question that is never confirmed is deleted after seven days. If ICL’s email sending is ever unavailable, the form tells you so at the time: the question then goes to a scholar as you typed it, without a confirmation step, and the answer comes by email from ICL’s own address.

Some answers are published on this site so that others with the same question can find them. Before that happens a reviewer removes your name, email and any detail that could identify you. If you tick “Keep my question confidential” it is never published at all, though ICL may still use it internally to recognise when someone else asks the same thing.

We do not store your IP address. To stop one person overwhelming the service we keep two one-way codes derived from your connection: one changes every day and is used to limit how fast questions can be sent; the other stays the same so that abuse can be recognised over time. Neither can be turned back into who you are. Using Ask a Scholar adds no cookie and no entry in your browser’s local storage.

To learn which questions the site cannot answer yet, ICL also keeps the words of your question, without your name or email, in two internal records: a count of the steps people take through Ask a Scholar, and a list of questions that no reviewed answer matched. The words are removed from both after 90 days, and from the first as soon as your question itself is purged.

If a message suggests someone may be in danger, we show emergency and support contacts instead of passing it on as a religious question, and we tell the review inbox at once so a person can act. Such messages are kept only for that purpose and are never published.

To have a question and your details removed, write to info@icl-huda.org from the address you used. A reviewer marks the record for deletion and it is purged within thirty days; the internal audit log keeps only that a question existed and what happened to it, never your name, email or the text.

The volunteer form asks for your name and email, an optional phone number, when you can help and how, and a tick confirming ICL may keep those details to reply to you. The iftar sponsorship form asks for the name to record the sponsorship under, your email, an optional phone number, the nights you chose, an optional headcount and dedication, and the same tick. Both are stored in our control panel and emailed to an ICL inbox so someone can reply. Nothing you send is published; a sponsor’s name is shown against a night on the form only if you tell ICL you are happy for it to be.

ICL can publish other forms here; they are listed on the Forms page. Each asks for your name and email, so that someone can reply, and the same tick. Your answers are stored beside the question each one answered, worded as it was when you sent it, and are emailed to an ICL inbox so someone can reply from there. Nothing you send is published.

The newsletter sign-up in the footer asks for your email address, your name if you want to give it, and a tick agreeing that ICL may email you. We store those with the exact sentence you agreed to, the time, and where on the site you signed up. The list is held in our control panel; the site sends it to no email service and sends nothing from it itself. Signing up twice is harmless. To stop hearing from ICL, write to info@icl-huda.org from that address: we mark you unsubscribed and keep the record of what you agreed to and when, which is how ICL can show that any email was asked for. Signing up again after opting out puts you back on the list with the new date and wording. If you ask to be erased instead, the record is deleted.

All four are kept in our control panel until ICL deletes them; nothing removes them automatically. They are visible only to the control panel accounts ICL has allowed to see submissions (by default its administrators; a volunteer who edits pages or events cannot open them). As with Ask a Scholar, we do not store your IP address; the same one-way code described above is kept with each so that one person cannot flood the forms. The forms set no cookie and nothing in your browser’s storage. To have a sign-up, request or answer removed, write to info@icl-huda.org from the address you used; the record is deleted, and the internal audit log keeps only that a submission existed and how its status changed, never your details.

Our Visit section has no embedded map. The Apple Maps and Google Maps buttons are ordinary links: nothing is sent to Apple or Google while you read this site, and they only learn anything once you follow one, after which their own privacy policies apply.

Our Qur’an reader can play an audio recitation of an ayah. Opening the reader or reading its text requests nothing beyond this website. The player loads no audio in the background, and nothing is sent to any recitation service until you press Play.

Once you press play, your browser streams that recitation from a third-party service, cdn.islamic.network, and that service can then see your IP address, as any server does for the files it sends. We do not receive that information ourselves, and it is limited to the moments you have audio playing.

No payment details are entered on this website. Choosing an amount here opens our giving platform at donate.stripe.com, which is operated by a third-party payment processor. Your card number never touches our servers and we never see it.

The Give section also offers two routes that are not card payments, and they behave differently. PayPal is an ordinary link: nothing is sent to PayPal while you are reading this site, and PayPal only learns anything about you once you follow that link, after which its own privacy policy applies. Zelle involves no link at all. We display our address, info@icl-huda.org, and you send the transfer from inside your own bank’s app. Copying that address happens entirely in your browser; nothing about it is sent to us, to Zelle, or to anyone else, and this website has no way of knowing that you made a Zelle payment. ICL’s bank does tell ICL, by email and never through this site, the sender’s name, amount and time of each Zelle gift; during a live appeal only the amount and time are added to the appeal’s count, and the sender’s name is not kept.

The processor collects what it needs to take a payment and to issue a receipt, and shares with us the information we need to acknowledge your gift and meet our reporting obligations as a charity (typically your name, email address, the amount and the date). That processor’s own privacy policy governs its handling of your data.

We keep donation records for as long as US charity and tax law requires. See our Donation Policy for how gifts are used and refunded.

If you email or call us, we hold what you send (your message and your contact details) for as long as it takes to deal with it and to keep a reasonable record. We use it to reply to you, and for nothing else.

This site has no visitor accounts and asks for personal information only through Ask a Scholar and the forms and sign-ups described above, so we do not knowingly collect anything from children under 13. If you believe a child has sent us personal information, by email or through Ask a Scholar or one of the forms, write to info@icl-huda.org and we will delete it, as the sections above describe.

Where a programme for young people asks for a registration or a photography release, that is handled separately and in person, not through this website.

Photographs published on this site are ICL’s own. We require a release on file before publishing a recognisable photograph of a community member, and especially of a child. If a photograph of you or your child appears here and you want it removed, tell us and we will take it down. You do not have to give a reason.

We do not sell your information, and we never will. We do not share it for advertising profiles. We share it only with the service providers that make the site, our giving and our measurement work (our hosting provider, our payment processor, and Google Analytics as described in section 2, which passes Google Ads a count of completed sign-ups and nothing you typed), and only to the extent they need it, or where the law requires us to.

A small number of ICL volunteers and staff have accounts in our control panel. Those accounts hold a name, email address, an optional recovery phone number, and a record of what each person changed on the site. Sessions expire after eight hours, repeated failed sign-ins lock the account, and every change is written to an append-only activity log so ICL can answer “who changed this?” This section does not apply to ordinary visitors.

Because we hold almost nothing about visitors, there is usually nothing to request. Where we do hold information about you (a donation record, an email you sent, an administrator account), you may ask us to tell you what we have, correct it, or delete it, subject to the records we are legally required to keep. Write to info@icl-huda.org.

A question sent through Ask a Scholar, a volunteer sign-up, an iftar request, an answer to one of our forms or a newsletter sign-up can be deleted on request, as the sections above describe. The activity log that records that it existed cannot be edited, but it holds neither your name nor your email nor what you wrote.

We will not treat you differently for exercising any of this.

The site is served over HTTPS with a strict transport policy. Uploaded files are type-checked and sanitised before they are stored, and are served with headers that stop a browser treating them as a page. Administrative permissions are enforced on the server, so hiding a control in the interface is never the only thing standing between someone and an action.

No system is perfectly secure, and we do not claim otherwise. If you believe you have found a vulnerability, please tell us at info@icl-huda.org before disclosing it publicly.

If we change this policy we will update the effective date at the top. A change that materially affects how we handle your information will be announced on the site rather than made quietly.

This policy was last reviewed on October 14, 2026.