The short version: there is no advertising on this site, and analytics runs only if you say yes. A banner asks you to accept or reject Google Analytics cookies; if you reject or ignore it, nothing from Google Analytics is loaded. There is no advertising network and no social media pixel. We do not build a profile of you, and we do not sell information about you.
What follows describes what the site actually does today, checked against the running application rather than written from a template. The date this page was last updated is shown at the top.
You do not need an account
Reading prayer times on this site requires no account, no sign-in, no email address and no personal details of any kind. There is no registration form and no newsletter on the public site. The only form is the optional contact form, described below.
Cookies
Two cookies are strictly necessary and need no consent. A third is a small preference cookie that remembers your analytics choice. If you accept analytics, Google Analytics adds two more. None is used to advertise to you.
| Cookie | What it is for |
|---|---|
| laravel-session | Holds the reference to your browsing session on this site. HttpOnly, Secure, SameSite Lax. It expires after 2 hours. Strictly necessary. |
| XSRF-TOKEN | A security token that lets the site verify a submitted form came from this site. Secure, SameSite Lax, expires after 2 hours. Strictly necessary. |
| apt_consent | Remembers whether you accepted or rejected analytics, for 6 months, so we do not ask on every page. It contains only the word granted or denied. |
| _ga and _ga_… (Google Analytics) | Set only if you accept. They let Google Analytics tell one visit from another so we can count visits and see which pages are used. They expire after up to two years. If you reject, or change your mind with "Cookie settings" in the footer, they are not set, or are removed. |
The banner offers Reject as plainly as Accept, and the site works the same whichever you choose.
What the server records
Serving a web page leaves some technical traces. These are the ones this application creates:
- A session record. Alongside the session cookie above, the server keeps a matching record that includes your IP address, your browser's user-agent string and the time of your last request. This is standard framework behaviour and is what makes a session work; it is not used to identify or profile you.
- An error log. When something goes wrong, the application writes a technical record to a log file on the server. That record can include the address that was requested and the internal details of the fault. It exists so that faults can be found and fixed. It is not currently deleted automatically, so we would rather tell you that than quote a retention period the site does not actually enforce.
- Web server logs. The site runs on hosting we do not operate ourselves. Hosting providers normally keep their own access logs, which typically include IP addresses. Those logs sit outside this application and we do not control how long they are kept.
Other companies your browser contacts
Until you accept analytics: none. Everything a page loads — its styles, its web font, its small scripts, its images and the prayer-time data itself — comes from this site's own domain.
If you accept analytics, your browser then contacts Google (googletagmanager.com and google-analytics.com). Google receives the page you view, your IP address, and details of your browser and device, and acts for us in counting visits. We have switched off Google's advertising features and signals, and set the shortest retention period Google offers (14 months). If you reject, none of this happens.
Links to other websites, such as the sources we credit, are only followed if you choose to click them; nothing is fetched from those sites while a page loads.
What we do not run
Stated plainly, because a privacy policy is most useful when it rules things out:
- No web analytics without your consent. Google Analytics runs only if you press Accept on the cookie banner. Nothing else measures your visit.
- No advertising. No ad network, no AdSense, no ad slots, no advertising or measurement cookies, and no personalised advertising.
- No social media buttons, embeds, pixels or share trackers.
- No fingerprinting, and no attempt to recognise you across visits or devices.
- Nothing sold or shared. We do not sell, rent or trade information about visitors, and we do not pass it to advertisers or data brokers.
An honest note about Google connections. The application is connected to Google in three ways. Google Search Console and PageSpeed Insights are switched on: our server asks Google for reports on how this site appears in Google Search, and for speed tests of three public pages. Those requests carry no information about visitors, and neither sets anything in your browser. Google AdSense is built but not configured and not running: no advertising is shown and nothing about you is sent to Google. Google Analytics runs only after you accept it, as described above. If any of this changes, this page will be updated to describe it before the change goes live.
Information you choose to send us
The contact form asks for your name, email address and message, and a topic you pick from a list. We store exactly that, and the reply we send you. We do not store your IP address or browser details with it. Messages are read in the site's admin by the people who run it, and are used to reply to you and to look into what you reported, and for nothing else. We do not add you to a mailing list.
We keep a message and our reply for as long as we need them to answer you and to keep a record of what was reported, and we delete them if you ask. Replies are sent as ordinary email through our hosting provider's mail service. Please do not send anything sensitive: email is not a secure channel, and a prayer-time report never needs to contain personal information.
You can also email us at info@allprayertime.uk. If you do, we have your email address and whatever you chose to write, and we use it in the same way.
If a report you send leads to a correction being published, what appears on the site is the corrected time and the reason for it. Your name and email address are not published.
Administrator accounts
This section applies only to the small number of people who are given an account to run the site. Visitors never have an account, and nothing here applies to ordinary readers.
- An account record holds a name, an email address used to sign in, a securely hashed password and a role. The password itself is never stored in a readable form.
- Changes made through the admin — editing a page, approving a correction, changing a setting — are written to an internal audit record that includes who made the change, what changed and the IP address it was made from. That record is how the site can show that a published time was not altered quietly.
- Anything resembling a password, token, key or credential is filtered out before an audit record is written.
Requests the site makes to other services
To check its own prayer-time calculations, the site sometimes makes requests from the server to independent reference sources — the US Naval Observatory among them. Those requests are started by us, not by your visit, and they contain only a place and a date. No information about you is included in them.
Your rights
Under UK data protection law you have rights over personal information held about you, including the right to ask what is held, to ask for it to be corrected or deleted, and to complain to the Information Commissioner's Office.
In practice there is usually very little to ask for: unless you have written to us (by the contact form or email) or been given an administrator account, what exists is a short-lived session record and whatever appears in the server logs.
To ask about anything on this page, or to ask us to delete something you sent us, email info@allprayertime.uk.
Changes to this page
This page describes the site as it works on the date shown at the top. If what the site does with data changes — if analytics or advertising is ever introduced, or a form is added — this page will be updated to describe it.
This is a plain description of how the site behaves, written so that a reader can check it against what the site actually does. It is not legal advice.