Privacy policy

What we collect

• Reading the site. Pages you open and how you use them (for example which story you opened, how far you scrolled, which links you followed), your browser type, device and screen size, and your IP address, from which an approximate location (country and region) is derived. In every country, sessions (a replay of clicks, scrolling and page changes, with what you type masked) are recorded only after you choose Accept, to find what is hard to use. Recording is never on by default.
• An account. Your email address and name, and the sign-in method you choose. The preferences you set (your perspective, desks, followed topics and sources, stacks), stories you save, and the reading activity we use to personalise For You and My Stack.
• Newsletters. Your email address, the editions you chose, your delivery time and time zone, and the confirmation of your sign-up. Our emails contain a tracking pixel and tracked links, so we learn when an email is opened or a link is clicked, with the IP address and browser of that request. When your delivery time zone is in Europe, they contain neither: no pixel, and every link goes straight to its page.
• Ask Clarity. The questions you type and the answers generated for them. Signed-out questions are rate-limited by a one-way hash of your IP address, not the address itself.
• AI assistants. When an assistant you connected uses Clarity Today, the request it sends and a few facts about it; see AI assistants (MCP) below.
• Messages to us. Whatever you send to contact@theclarity.today.

AI assistants (MCP)

You can connect ChatGPT, Claude or another AI assistant to Clarity Today through our public Model Context Protocol (MCP) server at /mcp (how to set it up). It needs no account, and this version has no sign-in or account linking, so nothing ties your assistant’s requests to you.

• What the server receives. Only the request your assistant sends to one of its tools: which tool, and its inputs, such as the keywords of a search or the story to read. It does not receive your conversation with the assistant, only what the assistant puts in that request.
• What we record. For each request: the tool’s name, whether it worked, how many stories it returned and how long it took; the name and version the assistant reports for itself, when it sends them; the first word of its User-Agent header (for example openai-mcp/1.0.0); and the protocol version. For a search we record how many characters the keywords had, never the keywords. These events go to PostHog under one shared anonymous identifier, so they build no profile of you, and they do not include your IP address.
• As with any request to the site, the request reaches us through Cloudflare, which delivers the site and protects it against attacks, so Cloudflare and our servers see the IP address it comes from: usually your assistant provider’s servers, or your own computer when the assistant runs there.
• Your assistant’s provider. What it does with your conversation, including the requests it sends us, is covered by that provider’s own privacy policy.

theclarity.us

theclarity.us is Clarity’s personalised morning edition. North Pulse LLC runs it too, and this policy covers it: everything above and below applies to it, with these differences.

• Signing in. You sign in with LinkedIn, which gives us your name, email address and profile photo, and a cookie keeps you signed in for up to 30 days. We keep the role and desks you choose, the items you save and share, and your reading activity, to shape your edition. If you invite someone, we keep the name, email address and LinkedIn link you give us for them and send them the invitation. If you connect LinkedIn to post from Clarity, we keep LinkedIn’s access token encrypted and use it only to publish what you choose to post; you can remove that access in your LinkedIn settings at any time.
• Analytics, by country. theclarity.us uses PostHog analytics: an anonymous ID kept on your device, the pages and features you use, and errors in the page. The rule depends on the country Cloudflare reports for your connection. In the EEA, the UK and Switzerland, and whenever the country is unknown, PostHog is not loaded at all until you choose Accept, and Reject keeps it off. Elsewhere it runs under a notice: Close keeps analytics on without recording, and Opt out turns it off and removes what it stored on your device.
• Session recording only with your yes. In every country, sessions (clicks, scrolling and page changes, with what you type masked) are recorded only after you choose Accept. Recording is never on by default.
• Global Privacy Control. A GPC signal is an opt-out there too: PostHog is not loaded and nothing is recorded.
• What events leave out. A web address in an event keeps only the site and the page (and any campaign tag), never the rest of the link, and events carry no name or email address. When you are signed in, they are linked to your account’s ID.
• On our servers. Account events (signing up, a trial starting, an invitation sent or accepted) and server errors are recorded with PostHog under your account’s ID, whatever you choose in the banner, because we need them to run the service and keep it working.

Change your choice at any time with Privacy choices at the foot of every theclarity.us page. The cookies and storage it uses are listed on the cookies page. Its emails work as described above for newsletters.

Why we use it, and on what legal basis

• To run your account, send the newsletters you asked for, personalise your feed and answer your questions — necessary to provide the service you requested (contract).
• To measure and improve the publication, keep it secure and prevent abuse — our legitimate interest in a working, safe product. Where the law requires consent for analytics storage (the EEA, the UK and Switzerland, by the country Cloudflare reports for your connection), we ask first and store nothing until you agree; elsewhere analytics runs under a notice, and Opt out turns it off. Session recording rests on your consent in every country: it starts only after you choose Accept.
• To meet legal obligations, such as answering a lawful request or keeping records.

We do not use your data for automated decisions with legal or similarly significant effects. The personalisation of your feed only orders stories you can all read anyway.

Who processes it for us

We use these service providers, each bound to process data only on our instructions:

• Amazon Web Services (United States) — hosting, databases, storage, and the AI models that write articles and answer questions.
• Cloudflare (global network) — content delivery and protection against attacks.
• Clerk (United States) — account sign-in.
• PostHog (United States) — product analytics, session recording and error reports.
• Microsoft (United States) — sending email.

Story images are often loaded directly from the publisher that ran them, so that publisher’s server receives your IP address and browser details, and may set its own cookies, when you view the image. We send it no referrer and no information about you.

International transfers

Our providers process data in the United States and elsewhere. Where data from the EEA, the UK or Switzerland is transferred, we rely on the safeguards those laws recognise, such as the European Commission’s Standard Contractual Clauses and their UK and Swiss equivalents, or the EU–US Data Privacy Framework where a provider is certified.

How long we keep it

• Account data, preferences, saved stories and questions: while your account exists. When you delete your account they are erased, and reading activity linked to it is erased or anonymised.
• Newsletter subscriptions: until you unsubscribe; we then keep only what proves you opted out.
• Analytics events and session recordings: for a limited period set in our analytics provider, after which they are deleted automatically.
• Email you send us: as long as needed to deal with it.

Your rights and choices

Wherever you live, you can ask us to tell you what we hold about you, give you a copy in a portable format, correct it, delete it, or stop using it for a purpose you object to. Where we rely on consent you can withdraw it at any time, as easily as you gave it. Email contact@theclarity.today from the address on your account; we answer within 30 days and may ask you to confirm it is you. You can also:

• change or withdraw measurement consent with Privacy choices in the footer of any page;
• unsubscribe from any newsletter with the link at the bottom of every email;
• manage your profile, preferences and sign-in in your account.

Global Privacy Control. If your browser sends a GPC signal, we treat it as your choice to opt out: no analytics storage on your device and no session recording.

California and other US states. We do not sell personal information or share it for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you. You have the rights to know, delete, correct and opt out, and we will not treat you differently for using them. An authorised agent may act for you with your written permission.

Complaints. If you are unhappy with our answer you may complain to your data protection authority (in the EEA, the authority where you live; in the UK, the ICO; in Switzerland, the FDPIC).

Children

Clarity is a general-audience news publication and is not directed at children. You must be 16 or older to create an account or subscribe. If you believe a child has given us personal data, write to contact@theclarity.today and we will delete it.

Security

Data travels encrypted (HTTPS) and is stored with access limited to the systems that need it. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires. To report a vulnerability, see security.txt.

Changes to this policy

We will update the date at the top when this policy changes, and tell account holders by email before a material change takes effect.