Scope
This Privacy Policy applies to all information collected through our website, any related platforms, applications, communications, and any other means through which you interact with us (collectively, the "Services"). By accessing or using any of our Services, you acknowledge that you have read and understood this policy.
Information We Collect
The site collects the following information.
- Contact form: your name, email address, organization if you give one, and your message.
- Newsletter: your email address, a name if one is sent with it, and when you joined.
- BDBV access: your email address and a record of your reading, described under BDBV Access below.
- Analytics: the pages you view, your IP address, your browser and device details, the page that referred you, and a few named events, recorded by Google Analytics and described under Cookies and Analytics below.
- Paper views: a running count of views for each paper. The count is a total and is not linked to you.
- IP address: used to limit repeated submissions. The contact form keeps a hash of it for one hour and the newsletter form for one minute. The BDBV access form and the BDBV question panel count attempts from it over a minute. None of these is stored with your name or email address.
BDBV Access
The Bundibugyo virus brief and map at bdbv.arcede.com ask once for an email address. The address is not verified.
- The site then sets a signed, HttpOnly cookie named bdbv_access on .arcede.com. It holds your email address and the time access was granted, and it lasts one year.
- A reader log records your email address, when you first and last visited, the address of each page you opened, query string included, and when you opened it, how long each page was in view, whether you clicked or typed on a page, and the site that sent you to the brief (its origin only, not the full link).
- The log also records whether you ticked "Email me when there is a major update."
- Opening the brief does not add you to a mailing list. Only readers who tick that box receive update emails.
- The site shows the log only to Arcede.
How Information Is Used
Arcede uses this information as follows.
- Contact messages: to read and answer your inquiry.
- Newsletter addresses: to send the welcome email and the newsletter.
- The BDBV reader log: to understand who reads the brief and the map, and how. Arcede may also contact a reader personally, one to one, about the work.
- Readers who ticked the box: to email them about major updates.
- Analytics: to see which pages are read and how often the contact and newsletter forms are used.
- The Google Ads tag: to measure Arcede's Google advertising, and through Google's advertising audiences to show Arcede's ads to people who have visited the site.
Who Processes Information
These providers process information for the site.
- Vercel hosts the site, handles every request to it and receives your IP address with each one. If a request to the site's store fails, or the newsletter welcome email fails to send, the error written to Vercel's server logs can include what the request carried: your email address, a name you gave, or the address of a BDBV page you opened.
- Upstash stores contact messages, newsletter signups, the BDBV reader log, the paper view counts and the short-lived counters that limit repeated submissions.
- Resend sends each contact message by email to info@arcede.com, with the reply-to set to your address. It also sends the newsletter welcome email.
- Google receives the analytics and advertising data described under Cookies and Analytics. Like any web request, the Google tags also receive your IP address, your browser and device details, the full address of each page you view and the page that referred you. Google may link the advertising data to a Google account you are signed in to.
- The BDBV map loads its base map from a map tile provider, OpenFreeMap by default, which receives your browser's requests for map images.
- A question typed into the BDBV question panel may be sent to an AI model provider to draft an answer.
Other Disclosure
Arcede may also disclose information in these cases:
- In response to legal process, government requests, or as required by applicable law.
- To protect the rights, property, or safety of Arcede, its users or the public.
- In connection with a merger, acquisition, reorganization, or sale of assets.
- With your consent or at your direction.
How Long Information Is Kept
- Contact messages: 90 days in the site's store, then deleted automatically. The copy emailed to info@arcede.com is not deleted automatically.
- The contact form's IP address hash: one hour. The newsletter form's: one minute.
- Newsletter signups: until you ask to be removed.
- The BDBV reader log: until you ask to be removed. Its list of individual page views keeps only the most recent 5,000 views across all readers.
- The BDBV access cookie: one year from when access was granted.
- The cookie choice cookie: six months from when you choose.
- The region note, arcede_region: 30 days from your last visit.
- Paper view counts: kept as running totals.
- Google Analytics and Google Ads data: kept by Google under the settings of Arcede's Google accounts.
Your Rights and Choices
Depending on your jurisdiction, you may have certain rights regarding your personal information, including requesting access to, correction of, or deletion of your personal information; objecting to or restricting certain processing activities; withdrawing consent where processing is based on consent; and opting out of marketing communications. Where the law gives you that right, you can also complain to a data protection authority. To exercise any of these, or to ask what the site holds about you, email info@arcede.com.
- Arcede can remove your newsletter signup, and your BDBV reader log entry with every page view recorded against it. Delete the bdbv_access cookie as well, or new visits are recorded again.
- To leave the newsletter, email info@arcede.com and the address is removed.
- Contact messages are deleted automatically after 90 days.
- To end BDBV access, delete the bdbv_access cookie in your browser. The site will then ask for an email address again.
- To stop the Google cookies, choose Reject under Cookie settings in the footer. To stop the Google tags altogether, block their scripts in your browser.
Security
We use commercially reasonable measures to protect the information we collect. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security. You provide information at your own risk.
Third-Party Links
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.
Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it.
Changes to This Policy
We reserve the right to modify this Privacy Policy at any time. Changes are effective when posted. Your continued use of the Services after any modification constitutes acceptance of the updated policy. We encourage you to review this page periodically.
Contact Us
If you have any questions about this Privacy Policy, please contact us at info@arcede.com.