Privacy Policy

Last updated: 29 October 2026

Risale-i Nur MCP is a connector (MCP server) that gives AI assistants such as Claude access to the works of Bediüzzaman Said Nursî. This page describes what data the connector (mcp.risalemcp.com) and this website (risalemcp.com) process. Our principle: collect nothing we do not need to do the job.

Who is responsible

Nur Hadimleri, a volunteer, independent project. Contact: destek@risalemcp.com

Data the connector processes

Tool calls

When the assistant uses one of the connector's tools in your conversation, the server receives only that tool's input: a search phrase, a section or sentence id, or the words quoted for a citation. The rest of your conversation never reaches the server. These inputs are processed to produce the result and are not stored.

Usage log

To keep the service running and to limit abuse, the following is logged for each request:

• the time,
• if you are signed in, your account name and the id of the connecting application (e.g. claude.ai),
• the tool or request type,
• how long the request took and, if it failed, the type of error.

Search phrases, quotations and conversation content are not logged. Log entries are deleted after 90 days.

IP addresses and cookies

The server keeps no access log; your IP address is not recorded. Limits for use without an account apply to all such use together, not per person. Neither this website nor the connector's sign-in page uses cookies, analytics or advertising tools.

Search by meaning

For search by meaning (semantic_search), the search phrase is sent to Voyage AI, which turns its meaning into numbers. Only the phrase is sent, not your account or conversation. The server keeps the result in memory while it runs and never writes it to disk. How Voyage AI handles data is described in its privacy policy.

Accounts

The connector can be used without an account. Accounts are created by the administrator and hold: a user name, a one-way hash of the password (scrypt; the password itself is not stored), hashes of session tokens, and the count of consecutive wrong passwords. An access token is valid for 1 hour, a session for 30 days. Your account and its log entries are deleted on request.

Sharing

Data is not sold and not used for advertising or profiling. It is shared with no one other than Voyage AI as described above. The chat application you use (e.g. Claude) processes your conversation under its own policy; for Claude, Anthropic's privacy policy applies.

Hosting

The server runs in Hetzner Online's Helsinki data center (Finland, EU) (Hetzner privacy policy). The domain's DNS records are at Cloudflare; traffic does not pass through Cloudflare.

Your rights

To learn what data is held about you, or to have it corrected or deleted, write to destek@risalemcp.com. Use without an account leaves no record that can be linked to a person.

Changes

If this policy changes, the new version is published on this page with its date.