What we collect at signup
We collect your email address, a peppered hash of your password (we never store the password itself), and your chosen username. IP addresses appear only in our hosting provider's transient access logs — they are not stored in our application database.
What's shown publicly
Your first name (always), your last name (only if you fill it in), your bio, the services you offer (with optional per-service descriptions), your scheduling URL, your optional anonymous-feedback URL, and a "✓ Verified" badge if the operator has personally verified your account. All profiles with a scheduling URL appear in the directory; the badge is the only difference between a verified and an unverified profile.
No outbound email
The platform sends no outbound email — no signup confirmation, no welcome message, no password-reset link. If you forget your password or want your account deleted, contact the operator out-of-band at admin@sadaqajariyah.online. The operator handles password reset using a management command (you receive a temporary password out-of-band and are forced to change it on first login).
Scheduling links
Clicking a member's "Schedule with me" button hands you off to their own third-party scheduling tool (Calendly, Cal.com, etc.). That tool's privacy policy applies to your booking — Sadaqa Jariyah neither sees your appointment time, your name, nor your reason for booking.
Anonymous feedback links
Some members publish a third-party form (Google Forms, Microsoft Forms, etc.) for anonymous feedback. Submissions go to that form's owner under the form provider's privacy policy — Sadaqa Jariyah does not see the responses.
Cookies
We set exactly two cookies: a Django session cookie (created when you log in) and a CSRF token cookie (created when you first load a form). Both are strictly necessary for the site to function. We do not use any analytics or third-party tracking cookies.
Account deletion
To delete your account, contact the operator at admin@sadaqajariyah.online. We deactivate immediately and hard-delete within 30 days.