Arz is built around a small idea: you should be able to read the news without being read back. This page explains what we collect, how we use it, and how to make us stop. In plain English. Without dark patterns.
Who we are
Arz, operated by an individual based in Dubai, UAE. We are the data controller responsible for the personal information described below. If you have questions about this policy, write to hello@arzdaily.com.
What we collect
Your email address, if you sign up for the daily briefing or The Long View weekly recap. We also generate a random unsubscribe token so you can opt out from any email without logging in.
Standard server logs generated by our hosting providers (Vercel and Railway). These include your IP address, browser type, and the pages you request, retained for typically thirty days. Logs are used for security, abuse prevention, and debugging.
Anonymous, cookieless web analytics through Vercel Web Analytics. This records page views, the routes you visit, referring URLs, the country we infer from your IP, and rough device type (mobile, tablet, desktop). It does not set tracking cookies, does not fingerprint your browser, does not capture your IP address in the dashboard, and does not build a profile across visits. We use this only to understand what's read and what's broken.
Browser localStorage on your device, holding your topic picks, time-budget preference, and a list of stories you have opened. This data never leaves your device. You can delete it any time by clearing your browser's site data for Arz.
What we do not collect. We do not use third-party advertising cookies. We do not fingerprint your browser. We do not sell, rent, or trade your data. We do not build a profile of who you are or what you read beyond what is technically necessary to deliver the briefing you signed up for.
How we use it
We use your email address only to deliver the briefing or weekly recap you subscribed to, and the occasional notice about material changes to this policy. We use server logs to keep the service operational and to defend against abuse. We use your local preferences on your own device to remember what you picked and what you have read.
Who we share with
We use a small number of vendors to operate Arz. Each one sees only what they need to do their job.
Resend sends the email digests. Resend receives your email address and the text of each digest. Resend acts as our data processor under a standard agreement.
Vercel hosts the website. Vercel receives standard hosting logs and the cookieless web-analytics events described above.
Railway hosts the backend API and database. Railway receives standard hosting logs and stores your email subscription record.
Anthropic provides the language model that synthesises news articles into the briefings you read. We send Anthropic only the text of public news articles plus our editorial prompts. We never send your email address, your topic preferences, or any other personal information to Anthropic.
All these vendors are based in the United States. If you access Arz from the European Union, the United Kingdom, or another jurisdiction, your data may be transferred to and stored in the United States.
How long we keep it
We keep your email subscription record until you unsubscribe. After unsubscribing, we retain your address with a status flag for a short period to prevent accidental re-subscription via stale forms, then delete it.
Server logs are typically retained for thirty days by our hosting providers and then rotated out.
Browser localStorage lives on your device until you clear it. We do not control it after it leaves our site.
Your rights
You can unsubscribe from any email using the link at the bottom of every digest. The link works without logging in.
You can ask us to delete your subscription record, export your data, or correct anything we hold about you by writing to hello@arzdaily.com. We will respond within thirty days. We do not require account verification beyond confirming you control the email address in question.
If you are in the European Union, the United Kingdom, the UAE, or another jurisdiction that grants you statutory data rights (GDPR, UK GDPR, the UAE Personal Data Protection Law, etc.), those rights apply to your data on Arz as described above. If you believe we have not honoured your request, you may contact the relevant supervisory authority in your jurisdiction.
Cookies and similar technologies
Arz does not use third-party advertising cookies. We use browser localStorage to remember your topic picks, time budget, and which stories you have opened. This information stays on your device.
We use Vercel Web Analytics for cookieless, anonymous page counting (described above under “What we collect”). No tracking cookies are set on your browser by Arz or by Vercel for this purpose.
Children
Arz is a general-audience news product not directed at children under thirteen. We do not knowingly collect personal information from children. If you believe we have, write to hello@arzdaily.comand we will delete it.
Changes to this policy
We update this page from time to time. Material changes (anything that affects what we collect or how we use it) are announced to subscribers by email before they take effect. The date at the top of this page tells you when it was last revised.
Contact
Privacy questions and data-rights requests: hello@arzdaily.com.