Skip to content

Privacy Policy

Last updated: October 7, 2026

This Privacy Policy describes how Arcede ("we," "our," or "us") collects, uses, and discloses information in connection with our website and any related services, platforms, or communications (collectively, "Services"). By accessing or using our Services, you acknowledge this policy.

Scope

This Privacy Policy applies to all information collected through our website, any related platforms, applications, communications, and any other means through which you interact with us (collectively, the "Services"). By accessing or using any of our Services, you acknowledge that you have read and understood this policy.

Information We Collect

The site collects the following information.

  • Contact form: your name, email address, organization if you give one, and your message.
  • Newsletter: your email address, a name if one is sent with it, and when you joined.
  • BDBV access: your email address and a record of your reading, described under BDBV Access below.
  • Analytics: the pages you view, your IP address, your browser and device details, the page that referred you, and a few named events, recorded by Google Analytics and described under Cookies and Analytics below.
  • Paper views: a running count of views for each paper. The count is a total and is not linked to you.
  • IP address: used to limit repeated submissions. The contact form keeps a hash of it for one hour and the newsletter form for one minute. The BDBV access form and the BDBV question panel count attempts from it over a minute. None of these is stored with your name or email address.

Cookies and Analytics

The site uses these cookies, tags and browser storage.

  • Google Analytics 4 runs on every page, sets cookies where they are allowed (see Cookie Choices below) and records the pages you view. It may also record some interactions on its own, such as scrolling, clicks on links to other sites and file downloads.
  • The Google Ads tag also runs on every page, sets cookies where they are allowed and tells Google Ads which pages you visit. Where cookies are allowed, Google may add you to Arcede's advertising audiences (remarketing), so that Arcede's ads may be shown to you later.
  • The site sends these events only to Google Analytics, not to the Google Ads tag: the contact form being opened, a contact message being received, a newsletter signup, and, on the BDBV map, the question panel being opened and a question being asked. Each carries fixed labels, such as which form was used, and the page it happened on. None carries your name, email address or anything you typed.
  • On the BDBV pages, both Google tags also receive a report when the page's security policy blocks something. It names the rule and the origin of what was blocked.
  • The BDBV access cookie, bdbv_access, is described under BDBV Access below.
  • The cookie choice cookie, arcede_consent, and the region note, arcede_region, are described under Cookie Choices below.
  • Some settings stay in your browser's own storage and are not sent to Arcede: your light or dark theme on the Papers and BDBV pages, the position and width of panels on the BDBV map, a note that a paper view was already counted in this tab, and a short-lived note used to detect a blocked access cookie.
  • You can block or delete cookies in your browser. The site works without the Google cookies. The BDBV pages need the access cookie.

BDBV Access

The Bundibugyo virus brief and map at bdbv.arcede.com ask once for an email address. The address is not verified.

  • The site then sets a signed, HttpOnly cookie named bdbv_access on .arcede.com. It holds your email address and the time access was granted, and it lasts one year.
  • A reader log records your email address, when you first and last visited, the address of each page you opened, query string included, and when you opened it, how long each page was in view, whether you clicked or typed on a page, and the site that sent you to the brief (its origin only, not the full link).
  • The log also records whether you ticked "Email me when there is a major update."
  • Opening the brief does not add you to a mailing list. Only readers who tick that box receive update emails.
  • The site shows the log only to Arcede.

How Information Is Used

Arcede uses this information as follows.

  • Contact messages: to read and answer your inquiry.
  • Newsletter addresses: to send the welcome email and the newsletter.
  • The BDBV reader log: to understand who reads the brief and the map, and how. Arcede may also contact a reader personally, one to one, about the work.
  • Readers who ticked the box: to email them about major updates.
  • Analytics: to see which pages are read and how often the contact and newsletter forms are used.
  • The Google Ads tag: to measure Arcede's Google advertising, and through Google's advertising audiences to show Arcede's ads to people who have visited the site.

Who Processes Information

These providers process information for the site.

  • Vercel hosts the site, handles every request to it and receives your IP address with each one. If a request to the site's store fails, or the newsletter welcome email fails to send, the error written to Vercel's server logs can include what the request carried: your email address, a name you gave, or the address of a BDBV page you opened.
  • Upstash stores contact messages, newsletter signups, the BDBV reader log, the paper view counts and the short-lived counters that limit repeated submissions.
  • Resend sends each contact message by email to info@arcede.com, with the reply-to set to your address. It also sends the newsletter welcome email.
  • Google receives the analytics and advertising data described under Cookies and Analytics. Like any web request, the Google tags also receive your IP address, your browser and device details, the full address of each page you view and the page that referred you. Google may link the advertising data to a Google account you are signed in to.
  • The BDBV map loads its base map from a map tile provider, OpenFreeMap by default, which receives your browser's requests for map images.
  • A question typed into the BDBV question panel may be sent to an AI model provider to draft an answer.

Other Disclosure

Arcede may also disclose information in these cases:

  • In response to legal process, government requests, or as required by applicable law.
  • To protect the rights, property, or safety of Arcede, its users or the public.
  • In connection with a merger, acquisition, reorganization, or sale of assets.
  • With your consent or at your direction.

How Long Information Is Kept

  • Contact messages: 90 days in the site's store, then deleted automatically. The copy emailed to info@arcede.com is not deleted automatically.
  • The contact form's IP address hash: one hour. The newsletter form's: one minute.
  • Newsletter signups: until you ask to be removed.
  • The BDBV reader log: until you ask to be removed. Its list of individual page views keeps only the most recent 5,000 views across all readers.
  • The BDBV access cookie: one year from when access was granted.
  • The cookie choice cookie: six months from when you choose.
  • The region note, arcede_region: 30 days from your last visit.
  • Paper view counts: kept as running totals.
  • Google Analytics and Google Ads data: kept by Google under the settings of Arcede's Google accounts.

Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information, including requesting access to, correction of, or deletion of your personal information; objecting to or restricting certain processing activities; withdrawing consent where processing is based on consent; and opting out of marketing communications. Where the law gives you that right, you can also complain to a data protection authority. To exercise any of these, or to ask what the site holds about you, email info@arcede.com.

  • Arcede can remove your newsletter signup, and your BDBV reader log entry with every page view recorded against it. Delete the bdbv_access cookie as well, or new visits are recorded again.
  • To leave the newsletter, email info@arcede.com and the address is removed.
  • Contact messages are deleted automatically after 90 days.
  • To end BDBV access, delete the bdbv_access cookie in your browser. The site will then ask for an email address again.
  • To stop the Google cookies, choose Reject under Cookie settings in the footer. To stop the Google tags altogether, block their scripts in your browser.

Security

We use commercially reasonable measures to protect the information we collect. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security. You provide information at your own risk.

Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it.

Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. Changes are effective when posted. Your continued use of the Services after any modification constitutes acceptance of the updated policy. We encourage you to review this page periodically.

Contact Us

If you have any questions about this Privacy Policy, please contact us at info@arcede.com.