Privacy Policy

Islamic Center of Longmont (ICL), also known as Masjid Al Huda, is a registered 501(c)(3) non-profit religious organisation in Longmont, Colorado (Tax ID 33-1335330). This policy covers the website at https://icl-huda.org. It does not cover our social media accounts, or any third-party site we link to.

Nothing that identifies you. There is no analytics software on this site, no A/B testing tool and no session recording. We do not build a profile of you, and we have no way to recognise you when you return.

Meta’s pixel, only with your permission. ICL runs fundraising posts on Facebook and Instagram and wants to know whether they bring people here. If you press Allow on the notice at the foot of the page, we load Meta’s pixel; it then tells Meta which pages you view, when you click through to our giving page, and when you send a question to a scholar, a volunteer sign-up or an iftar request. It never receives your name, email, phone number or the text of what you sent. If you press No thanks, or never answer, nothing from Meta is loaded at all. Your choice is kept in your browser under icl-consent; clear it to be asked again. What Meta does with data it receives is described in Meta’s own privacy policy.

Our fonts are served from our own server rather than from a font network, so loading a page does not announce your visit to a third party.

Like any website, our hosting provider keeps short-lived technical server logs (typically the requesting IP address, the page requested, and the time), which exist to keep the site running and to defend against abuse. We do not use them to identify individuals and we do not combine them with anything else.

This is what happens while you browse. Sending something through Ask a Scholar or one of the forms is different; see the two sections below.

We set no cookies for visitors. Four things are saved in your browser’s local storage, and nothing else: your light/dark choice under the key icl-theme; on the Qur’an pages, your reading preferences and place under icl-quran-prefs (text size, reading mode, translation, playback settings, the last ayah you were reading and your reading plan); if you close a site notice, its id under icl-dismissed-announcements so it stays closed on your next visit; and your answer to the measurement notice under icl-consent. None of it ever leaves your device, none of it is sent to us, and clearing your browser data removes all four. If you allowed Meta’s pixel, Meta itself may set cookies on its own domain; that is Meta’s doing, not ours, and pressing No thanks stops it.

Ask a Scholar sends your question to a person at the masjid. To do that, and to send the answer back, we ask for your name and email address and store them with the question. They are visible only to the people at ICL who review questions, never on the site. When the site can send email, nothing goes to a scholar until you open the confirmation link we send you, and a question that is never confirmed is deleted after seven days. Until ICL’s email sending is switched on, the form tells you so at the time: the question then goes to a scholar as you typed it, without a confirmation step, and the answer comes by email from ICL’s own address.

Some answers are published on this site so that others with the same question can find them. Before that happens a reviewer removes your name, email and any detail that could identify you. If you tick “Keep my question confidential” it is never published at all, though ICL may still use it internally to recognise when someone else asks the same thing.

We do not store your IP address. To stop one person overwhelming the service we keep two one-way codes derived from your connection: one changes every day and is used to limit how fast questions can be sent; the other stays the same so that abuse can be recognised over time. Neither can be turned back into who you are. Using Ask a Scholar adds no cookie and no entry in your browser’s local storage.

If a message suggests someone may be in danger, we show emergency and support contacts instead of passing it on as a religious question, and we tell the review inbox at once so a person can act. Such messages are kept only for that purpose and are never published.

To have a question and your details removed, write to info@icl-huda.org from the address you used. A reviewer marks the record for deletion and it is purged within thirty days; the internal audit log keeps only that a question existed and what happened to it, never your name, email or the text.

The volunteer form asks for your name and email, an optional phone number, when you can help and how, and a tick confirming ICL may keep those details to reply to you. The iftar sponsorship form asks for the name to record the sponsorship under, your email, an optional phone number, the nights you chose, an optional headcount and dedication, and the same tick. Both are stored in our control panel, visible only to the ICL volunteers who coordinate those things, and emailed to ICL’s review inbox so someone can reply. Nothing you send is published; a sponsor’s name is shown against a night on the form only if you tell ICL you are happy for it to be.

As with Ask a Scholar, we do not store your IP address; the same one-way code described above is kept so that one person cannot flood the forms. The forms set no cookie and nothing in your browser’s storage. To have a sign-up or request removed, write to info@icl-huda.org from the address you used; the record is deleted, and the internal audit log keeps only that a submission existed and how its status changed, never your details.

Our Visit section embeds a map from Google Maps. When that section loads, your browser connects to Google, and Google may receive your IP address and set its own cookies under its own terms. This is outside our control. If you would rather not load it, you can use the written address and directions link instead, or block third-party frames in your browser.

Google’s handling of that data is described in its own privacy policy at policies.google.com/privacy.

Our Qur’an reader can play an audio recitation of an ayah. Opening the reader or reading its text requests nothing beyond this website. The player loads no audio in the background, and nothing is sent to any recitation service until you press Play.

Once you press play, your browser streams that recitation from a third-party service, cdn.islamic.network, and that service can then see your IP address, as any server does for the files it sends. We do not receive that information ourselves, and it is limited to the moments you have audio playing.

No payment details are entered on this website. Choosing an amount here opens our giving platform at donate.stripe.com, which is operated by a third-party payment processor. Your card number never touches our servers and we never see it.

The Give section also offers two routes that are not card payments, and they behave differently. PayPal is an ordinary link: nothing is sent to PayPal while you are reading this site, and PayPal only learns anything about you once you follow that link, after which its own privacy policy applies. Zelle involves no link at all. We display our address, info@icl-huda.org, and you send the transfer from inside your own bank’s app. Copying that address happens entirely in your browser; nothing about it is sent to us, to Zelle, or to anyone else, and this website has no way of knowing that you made a Zelle payment.

The processor collects what it needs to take a payment and to issue a receipt, and shares with us the information we need to acknowledge your gift and meet our reporting obligations as a charity (typically your name, email address, the amount and the date). That processor’s own privacy policy governs its handling of your data.

We keep donation records for as long as US charity and tax law requires. See our Donation Policy for how gifts are used and refunded.

If you email or call us, we hold what you send (your message and your contact details) for as long as it takes to deal with it and to keep a reasonable record. We use it to reply to you, and for nothing else.

This site has no visitor accounts and asks for personal information only on the three forms described above, so we do not knowingly collect anything from children under 13. If you believe a child has sent us personal information, by email or through Ask a Scholar or one of the forms, write to info@icl-huda.org and we will delete it, as the sections above describe.

Where a programme for young people asks for a registration or a photography release, that is handled separately and in person, not through this website.

Photographs published on this site are ICL’s own. We require a release on file before publishing a recognisable photograph of a community member, and especially of a child. If a photograph of you or your child appears here and you want it removed, tell us and we will take it down. You do not have to give a reason.

We do not sell your information, and we never will. We do not share it for advertising. We share it only with the service providers that make the site and our giving work (our hosting provider and our payment processor), and only to the extent they need it, or where the law requires us to.

A small number of ICL volunteers and staff have accounts in our control panel. Those accounts hold a name, email address, an optional recovery phone number, and a record of what each person changed on the site. Sessions expire after eight hours, repeated failed sign-ins lock the account, and every change is written to an append-only activity log so ICL can answer “who changed this?” This section does not apply to ordinary visitors.

Because we hold almost nothing about visitors, there is usually nothing to request. Where we do hold information about you (a donation record, an email you sent, an administrator account), you may ask us to tell you what we have, correct it, or delete it, subject to the records we are legally required to keep. Write to info@icl-huda.org.

A question sent through Ask a Scholar, a volunteer sign-up or an iftar request can be deleted on request, as the sections above describe. The activity log that records that it existed cannot be edited, but it holds neither your name nor your email nor what you wrote.

We will not treat you differently for exercising any of this.

The site is served over HTTPS with a strict transport policy. Uploaded files are type-checked and sanitised before they are stored, and are served with headers that stop a browser treating them as a page. Administrative permissions are enforced on the server, so hiding a control in the interface is never the only thing standing between someone and an action.

No system is perfectly secure, and we do not claim otherwise. If you believe you have found a vulnerability, please tell us at info@icl-huda.org before disclosing it publicly.

If we change this policy we will update the effective date at the top. A change that materially affects how we handle your information will be announced on the site rather than made quietly.

This policy was last reviewed on 2026-09-05.