Sutur

Your reading is yours. Here is everything the site does with it.

Sutur lets members read illustrated Arabic books. This page lists what we keep if you make an account, every place the site ever talks to anyone else, what they can see, and how to stop it. It describes what the code does today, not what we hope to do.

Reading needs a free account.

Nothing tracks you.

An account keeps a few things.

Nothing leaves unless you choose it.

Browse the books, read their descriptions and preview a few pages without signing in. To read a whole book or download its PDF you need a free account. We then save your name, your email, a scrambled copy of your password, which books you opened and downloaded, and any notes you write. You can delete all of it from Settings.

Everything that leaves.

Each line is a place the site can contact. Open one to see who it is, what they can see, and how to stop it.

What they can see
Your IP address, the page you asked for, your browser's name and the time, as in any website's server log. Never the book you are reading beyond the page address.
Why it happens
A website cannot be sent to you without being asked for.
How to stop it
Not possible while using the site. Fonts, pictures and scripts all come from our own address, so no other company is asked.
Asked by
Your browser.
Addresses
the site's own address
As a network allowlist

If you want to check, these are the only addresses the site can ever ask your browser to contact.

# On its own
(the site's own address only)

# Only if you use Google sign-in
accounts.google.com
*.googleusercontent.com

What an account keeps.

Your name
What you typed when you signed up. You can change it in Settings.
Your email
Used only to sign you in. We send no email: no newsletters, no reminders, no receipts.
Your password
Never stored. Only a salted bcrypt hash with 12 rounds is kept, so we cannot read it.
Your photo
Optional. Shrunk to a 256 pixel square in your browser before it is uploaded.
Support view
Site admins can open a support page for your account that shows how it is set up (sign-in methods, whether a photo or birth date is set) and how much it is used (counts of books opened, finished, downloads, notes and the last active date). It never shows which books you read, and admins use it only to help you.
Notifications
Short records of replies to your comments, new volumes of series you finished and trophies you earned, shown only to you in the bell. Read ones are deleted after 90 days, all after 180. Turn them off in Settings and they are cleared.
Your reading
Which books you opened, the last page you reached and when. It powers "Continue reading" on your account page.
Your downloads
PDF downloads need an account. We keep which book you downloaded and when, so your account page can show your download history. The PDF you get ends with a page signed with your name, your email and the date.
Your notes
Thoughts you post on a book. If you choose Share, everyone sees the text and your name, never your email. "Only me" notes are shown to you alone. You can delete any note.
Your bookmarks and reading time
The pages you bookmark, visible only to you. We also add up how long readers spend on each page of a book, as anonymous totals with no name attached, to show "about N min left".

What it never does.

Analytics

No advertising, no third-party analytics and no tracking of readers: nothing in the page or the app talks to another company. The server keeps only anonymous daily totals of how many times each blog post was opened or read to the end, with no name, address or cookie.

Selling or sharing

There is nobody to sell it to. Your account data is not given to publishers, advertisers or other services.

Profiling

Your reading history is shown to you and nobody else. It is not used to build a profile or to recommend books.

Emailing you

Nothing is sent to your inbox. Not even a welcome message.

How it is protected.

Passwords
Salted bcrypt hashes with 12 rounds. The password itself is never kept.
Your session
One cookie. Scripts on the page cannot read it, it is only sent over HTTPS when the site runs on HTTPS, and it is not sent with requests from other sites. It lasts 30 days.
What stays in your browser
Your theme and your default reading mode are saved on your device only, never sent to us.
The database
Account data lives in one database. Its sign-in details are kept in the server's environment, not in the code.

You are in control.

Change
Edit your name, photo and password in Settings.
Clear
Settings, My data, Clear reading history removes every book you opened and your place in it. The account stays.
Delete
Settings, Danger zone, Delete account removes your account and your reading and download history for good. Nothing is kept for later.

Do not take our word for it.

  1. Watch it. Open your browser's network tab while you read. You will see requests to the site itself and nothing else, unless you chose Google sign-in.
  2. Block it. Allow only the addresses in the list above. Everything keeps working without Google sign-in.
  3. Delete it. Make an account, then delete it from Settings. The data goes with it.

Last updated October 2026. This page explains how the site works. It is a plain-language description, not legal advice.