Ummah Library

1. What we collect, and why

• Your UmmahPass account — email address, your chosen screenname, and a password (hashed using industry-standard methods — never stored in plain text). This is one identity across all UMG Districts, so you sign in once instead of creating ten accounts. MuslimTorrents is sign-in-only through UmmahPass — there is no separate MuslimTorrents password.
• Two kinds of activity tracking — and they are different:
  (1) Aggregate, self-hosted traffic analytics — see section 3.
  (2) A first-party behavioral system that links your activity across UMG sites to build a profile used today only to power product improvements, and gated before any future ad use. It runs on these sites, and only these:
  • UmmahCity (ummah.city)
  • UmmahPass (ummahpass.io)
  • ummah.email
  • UmmahPlaces (ummahplaces.com)
  • UmmahCauses (ummahcauses.org)
  • UmmahArmy (ummah.army)
  • UmmahBuzz (ummahbuzz.com)
  • ummah.me
  • UmmahLocal (ummahlocal.com)
  • MuslimTorrents (muslimtorrents.com)
  The profile includes signals inferred from what you engage with — including religious-content signals (for example, whether you engage with prayer or Quran content) and giving/spending signals. This tracking is on by default for a new account; you can turn it off any time in your UmmahPass privacy settings, and turning it off deletes your existing profile, not just future collection. No profile data is sold or shared externally, and none is exported to any ad platform today — if that ever changes, it will only include members who separately opt in to ad personalization. Every site that runs this system says so on its own privacy page — you should never have to come here to find out that a page you are on is part of it.
• Payment records — if you become a paying member or donate, Stripe (our payment processor) handles your card. We never see or store your card number. We keep the records Stripe gives us: what you paid, when, and for which membership or donation, so we can honor your membership and your receipts.
• Email you host with us (ummah.email) — your messages are stored on our own servers so we can deliver them to you. See section 5 for exactly what that means.
• Chat — messages you send in UmmahChat. See section 6 for what is and isn't end-to-end encrypted.
• Content you post — on MuslimTorrents that means torrent uploads, forum posts, requests, comments, and any profile information you choose to make public; the same principle applies to reviews, listings, missions, and feed posts on other UMG Districts.
• Torrent activity, because that is how a tracker works — your account's upload/download/ratio statistics, and while a torrent is active, your IP address is visible to other peers in that torrent's swarm (and to the tracker, to coordinate peers). This is standard behavior for the BitTorrent protocol on every private tracker — it is not unique to MuslimTorrents, and it is not something we can technically hide while still running a working tracker.
• Web-push subscriptions — only if you turn notifications on. Stored keyed to your account so we can deliver to your devices, deleted when the subscription dies or you turn them off. Notifications are limited by policy to things a human sent you or things you asked for; mail notifications are deliberately generic (they do not include the sender or subject line in the push payload).
• Server logs — like every website, our web servers log requests (IP address, page, time, browser type) for security, abuse prevention (e.g. blocking brute-force login attempts), and debugging. These are kept for a limited period for security and debugging, then deleted or anonymized.

2. What we will NEVER do

These are commitments, not marketing:

• We never sell your data. Not to advertisers, not to data brokers, not to anyone.
• We never put third-party ad trackers on member surfaces. No Google Analytics, no Meta pixel, no ad-network cookies following you around the Ummah Media Group ecosystem.
• We never read or scan your email to target ads at you. Your inbox is not an advertising asset.
• We will never build prayer trackers, worship streaks, or "religious scores" into our products, and we will never sell or share religious-signal data with anyone. Our behavioral system (section 1) does infer some religious-content engagement signals — always disclosed, always yours to turn off and erase.
• We never sell donor data, and donor identity — who you give to — is walled off from every commercial use, permanently. Religious-content engagement signals are handled exactly as section 1 describes: used only for product improvement today, never sold, never shared outside UMG.
• We never generate fake activity — reviews, donor counts, member counts, seeder or leecher counts. What you see on our surfaces — including torrent statistics on MuslimTorrents — is real or clearly labeled.

3. Analytics — self-hosted, first-party

We measure our own sites with Matomo, running on our own servers (analytics.ummahmediagroup.com). Nothing about your visit is sent to Google, Meta, or any analytics company — the data stays on infrastructure we own. We use it to answer questions like "is the signup page broken?" and "which pages do people actually use?", with known bots excluded from the counts.

We also record some first-party product events (e.g. "a torrent was downloaded") in our own databases to run and improve the products. This is first-party only — it is never shared with or sold to anyone.

Member pages on MuslimTorrents make very few third-party network requests: a font file from Bunny Fonts — a no-logging font CDN — on some pages, and nothing else. The complete list of outside services across the ecosystem is in the third-party table in section 15.

4. Advertising — contextual, never surveillance

Some UMG surfaces show ads; advertising is how much of this stays free. Our rule on member surfaces is simple: ads are matched to what a page is about, never to who you are. MuslimTorrents shows a modest, contextual MuslimReach ad on its home and browse pages for that reason — it appears because of the page it's on, not because we tracked you across the internet. No cross-site tracking of members, no demographic profiles of members, no individual ad targeting of members.

On our own ad marketplace we count "ad views" (an ad unit rendering) and we tell advertisers exactly that — never "people reached." We deliberately chose not to build per-person unique tracking into our own ad server, even in hashed form, because it conflicts with this pledge.

This policy covers UmmahCity and its member Districts, including MuslimTorrents. Our separate advertising business, MuslimReach, also places ads on third-party publisher websites — not on UMG member surfaces — using standard industry ad technology, which can include cookie-based audiences built from visitors to those publisher sites. Those audiences come from publisher-site visitors, never from UMG member accounts, and member data is never used to build or target them.

5. Email hosting — honest about what it is

If you use ummah.email, your mailbox lives on servers we own and operate. Honestly stated:

• Mail travels encrypted in transit (TLS) between servers and to your devices.
• Mail is not end-to-end encrypted at rest. Like almost every email provider on earth (including the big ones), messages are stored in a form our systems can read — that is what makes spam filtering and search work.
• The difference between us and the big ones is what we do with that: we do not scan, mine, or analyze your mail for advertising or profiling. Ever. Access to stored mail is restricted to what is required to operate the service (e.g. delivery, spam filtering, a support issue you ask us to look at).

6. Chat — what's encrypted and what isn't

• Direct messages (DMs) in UmmahChat are end-to-end encrypted — encrypted on your device, readable only by you and the person you're messaging.
• Group Rooms are NOT end-to-end encrypted — by design. Rooms are moderated community spaces; moderation requires that moderators can see messages. We say this plainly instead of implying everything is private.
• Voice/video calls run on servers we own ("owned, not Meta") but are not end-to-end encrypted.

7. UmmahSocial — your page, and who can see it

UmmahSocial (ummahsocial.com) is a place to post. What follows describes only that District.

Posts are public by default — you pick the audience each time

When you post, the audience picker defaults to Anyone — a public post that anyone on the internet can read, with or without an account. You can change it on every post: Members (any signed-in UmmahCity account) or Just this link (only people who have the link; it never appears in feeds or on your page). Replies never become more visible than the post they answer. Public posts may also appear in search engines and on your ummah.me page, and are shown in the UmmahCity "Today" feed to people who follow you. Posts that are not public are marked so search engines do not index them.

If you post a link, our server fetches that page once to build the preview card, and we store a copy of the preview image ourselves — so the site you linked to never learns who read your post.

Photos: location data is stripped before anyone can see them

Photos you attach are re-encoded before they are shown to anyone. That re-encoding removes the hidden camera metadata photos carry — including GPS location, device details and timestamps. The uploaded original is held in a non-public staging area only while this happens, then deleted; if a photo cannot be processed, it is dropped entirely rather than shown unprocessed.

Who can see your follow graph

How many people follow you is your information: it shows on your page only if you turn it on in Settings, and it is off by default. The list of who follows you is visible only to you, always — it names other people, so it is never public. The list of accounts you follow becomes visible only if you turn the same setting on. If your account is set to approve followers, new followers need your approval before they see your posts.

What a report contains, and that every decision is logged

When you report a post, we store which post, your account, the reason you chose, and the report's status while a person reviews it. Reports are read by named people on our team — not by software. The person you reported is not told who reported them. Every moderation decision — hiding a post, removing it, removing photos, dismissing a report — is written to an internal log with who acted and why, so decisions can be audited.

Deleting posts, and leaving UmmahSocial

Deleting a post removes it immediately from every page, feed and count, its link stops working, and any photos on it are erased from our storage — not just hidden from view. Leaving UmmahSocial (Settings, then deactivate) does this for all your posts at once, removes your likes, clears your follow connections, and takes your page offline — your UmmahCity account, email and everything else in the city are untouched. If you come back, your page reopens; removed posts stay removed.

8. Payments — Stripe processes, we don't hold cards

All payments (memberships, donations, business services) are processed by Stripe on Stripe-hosted payment pages. Your card number goes to Stripe, not to us — we never receive or store it. We keep transaction records (amount, date, product) to honor your membership, provide receipts, and meet accounting obligations. Stripe's own privacy policy governs the data they process: stripe.com/privacy

9. Security — the honest version

• Everything is encrypted in transit (TLS) between you and our servers, including MuslimTorrents' tracker announces and downloads.
• We run on servers we lease and operate ourselves, located in Europe — not Big Tech cloud infrastructure.
• We use standard protections: firewalled services, automatic security patching, brute-force login blocking, and — via your UmmahPass account — optional two-factor authentication.
• We do not use words like "military-grade," "bank-level," or "zero-knowledge," because we have not earned them and most companies who use them haven't either. What is end-to-end encrypted here is exactly what section 6 says — no more.
• Stored data is protected by access controls and server security, not disk-level encryption — closing that gap is on our roadmap.
• If we experience a data breach affecting your personal information, we will notify affected users as required by applicable law.

10. Staff access and "Help Mode"

If you ask for help with your UmmahPlaces business dashboard, a UMG admin can view it as you see it through Help Mode — a deliberately constrained tool: sessions are time-limited (20 minutes), every use is logged, and you are notified within minutes that it happened. We built it this way so support never means silent access to your account.

11. Data retention and deletion

• We keep your data while your account is active.
• You can ask us to delete your account and data at any time by emailing salaam@ummah.city. We will delete your data from our live systems on request and confirm when it's done. Today this is handled by a person on our team, not an automated system — expect it to take a few business days, not seconds. Backup copies are removed on our normal backup-rotation schedule and are not kept indefinitely.
• If you use the tracking off-switch described in section 1, that alone deletes your behavioral profile and anonymizes your past events immediately — you don't need to request a full account deletion just to stop that.
• We are required to keep some records even after deletion: payment and donation records for as long as tax and accounting law requires, and records needed to prevent abuse (e.g. a ban-evasion or ratio-cheating list) for as long as needed to keep the community safe.
• You can also ask us what data we have about you, or ask us to correct it, the same way — email salaam@ummah.city.

12. Legal process

We may also disclose information without your consent when required by law — for example, in response to a valid subpoena, court order, or other legal process, or where necessary to protect the safety of a person, prevent fraud, or protect our legal rights.

13. Business transfers

If UMG is ever involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we will require any successor to honor the commitments in this policy, including the "What we will never do" section.

14. Children

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will delete it.

15. Third parties we rely on

The short list of outside services that touch member data, and why:

What is deliberately absent from this table: Google Analytics, Meta/Facebook, TikTok, ad-tech data brokers, or any tracker used to build an ad-targeting profile of you. The two exceptions above — ip-api.com and the Floodlight measurement pixel — are used for location context and ad measurement, not for building a profile to target you with ads.

16. Changes to this policy

If we change this policy, we will post the new version here with a new date, and for meaningful changes we will tell you (a notice on the site or an email) before they take effect, except where an immediate change is required for security or legal-compliance reasons. We will never use a policy change to quietly start doing something section 2 says we never do — those commitments are the point of this document.

17. Contact

Questions, requests, or concerns: salaam@ummah.city

Ummah Media Group LLC · salaam@ummah.city