Privacy policy
What data passes through us, why, and your rights.
Last updated: · Version 0.1
Legal draft: this wording was written in-house and has not been reviewed by a legal professional; a review is to follow. We say so here because a reader deserves to know it.
Summary
We do not ask you to create an account, we set no cookies, and we use no analytics or advertising tools. The only data that passes through us is the technical request data our hosting provider processes, the theme preference stored in your browser, and whatever you send us by email.
Who controls the data
The data controller is Scorura, in Riyadh, Saudi Arabia. For privacy matters, write to info@scorura.com.
What we process and why
- Delivering pages: our hosting and network provider (Cloudflare) processes your IP address, browser type, the page requested and the time, to serve and protect the site. We do not use this data to identify or track you.
- Theme preference: if you choose light or dark mode, the choice is stored in your browser only and never sent to us. You can clear it in your browser settings.
- Your messages: if you write to us, we keep your message and address to answer it and to document any correction that follows.
- Visit links: a visit link passes through an address on our site and then redirects you to the provider. We add no identifier of yours; what the provider collects after you arrive is governed by its own policy.
| What we process | Data | Where it is kept | How long | Basis |
|---|---|---|---|---|
| Delivering pages | IP address, browser type, page requested and time | the Cloudflare network | per Cloudflare’s policy | legitimate interest in running and protecting the site |
| Theme preference | one word: light or dark | your browser only; it never reaches us | until you clear it | carrying out your choice on the device |
| Your messages | your email address and the text you send | our mailbox | until we reply and document any correction | answering you and documenting a correction |
| Visit links | we add no identifier of yours | nothing on our side | none | no processing by us |
What we do not do
We set no cookies and load no fonts or scripts from third parties. The table shows the content security policy the site applies today and the only storage key it uses.
| Evidence | Current value |
|---|---|
| Content-Security-Policy | default-src 'none'; script-src 'self' 'sha256-9DYXNR8lxj0cZbX5xIj2JDZqm4tFzMGM35K/FhJaK2I='; style-src 'self'; font-src 'self'; img-src 'self' data:; connect-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests |
| localStorage | theme |
Service providers
Cloudflare, to host the site and serve it over its network, and the email provider that receives your messages. We do not sell data or share it for marketing.
Transfers outside your country
Technical request data may be processed in Cloudflare data centres outside Saudi Arabia. We follow the requirements of the Saudi Personal Data Protection Law (PDPL) and its regulations on transfers outside the Kingdom.
Retention
We keep messages as long as needed to answer them and to document corrections, then delete them. How long Cloudflare keeps request data is governed by its own policy.
Your rights
Under the Saudi Personal Data Protection Law (PDPL) you have the right to be informed about the processing of your data, to access it or obtain a copy, to have it corrected, and to have it destroyed when no longer needed. Send requests to info@scorura.com; you may also complain to the Saudi Data and AI Authority (SDAIA). Requests from visitors outside Saudi Arabia are handled the same way.
Children and security
The site is not directed at children, and we do not knowingly collect data about them. The site is served over an encrypted connection and loads no third-party scripts.
Changes to this policy
Every change to this policy is logged with its date in this page’s history and in the changelog.
Found an error on this page? Write to us
History of this page
- Page structure published