WHAT THE POLICIES SAY

Arc is a Chromium-based browser made by The Browser Company of New York Inc., which Atlassian announced it was acquiring in September 2025; The Browser Company's own site now points visitors from an Arc security post toward Dia, its newer AI-first browser, and public reporting describes Arc as having entered maintenance mode. Arc's privacy policy requires an account (name, email) to sign up and states the company does not sell personal data, but discloses that optional Arc Max AI features (e.g. tab tidying) send data to service providers OpenAI and/or Anthropic. In September 2024 The Browser Company's CTO publicly disclosed CVE-2024-45489, a misconfigured Firebase access-control list that could let a Boost be reassigned between users; the company said no members were affected, fixed it within a day of disclosure, and paid the reporting researcher a bounty despite lacking a formal bug bounty program at the time. No regulator action or data breach affecting user data was found in the sources checked.

TIMELINE

NO ENTRIES ON FILE YET.

ULTIMATE PARENT

TOOLS WE RECOMMEND

PLUS

RECEIPTS

7 ON FILE

[2025-10-15] · COLLECTION

Arc's privacy policy states that signing up for an Arc account collects profile/contact information such as name and email address, IP/device data such as IP address and related general location data, the device type and operating system, and product-usage data such as how often features are used.

arc.net ↗

OWNERSHIP TRANSPARENCY

The Apple App Store listing for Arc names the publishing developer entity as The Browser Company of New York Inc. and links to that company's privacy policy as the governing document for the app's data practices.

apps.apple.com ↗

[2024-09-20] · OWNERSHIP TRANSPARENCY

The Browser Company's own blog, in the same post disclosing the Arc security incident, points visitors via its site navigation to 'Meet Dia, a new AI browser from the makers of Arc,' reflecting the company's shift in primary product focus from Arc to Dia (consistent with public reporting that Arc entered maintenance mode in 2025); this is a thin nav-link-level self-citation, not a full company statement, since the fuller 'letter to Arc members' announcement (reported as published on the company's Substack) could not be located at a fetchable URL within budget.

arc.net ↗

[2025-09-04] · OWNERSHIP TRANSPARENCY

Atlassian's official company blog announced it is acquiring The Browser Company of New York, described as the team behind Arc and Dia, making the Browser Company a subsidiary of the publicly traded, SEC-reporting Atlassian going forward.

atlassian.com ↗

[2025-10-15] · SHARING

Arc's privacy policy lists the parties it discloses personal data to: infrastructure/hosting and communications service providers, analytics providers, security/fraud-prevention consultants, support vendors, and -- specifically -- OpenAI and/or Anthropic when a member uses Arc's AI-powered features. Elsewhere the policy describes Tidy Tab and similar Arc Max features as sending relevant personal data to whichever of those two providers powers the feature.

arc.net ↗

[2024-09-20] · TRACK RECORD

The Browser Company's CTO publicly disclosed CVE-2024-45489 on the company's own blog: a misconfigured Firebase Access Control List let a member's synced Boost (custom CSS/JS injected into a site) have its creatorID reassigned to another user, potentially running that Boost's code on the new user's browser; the company said no members were affected, the vulnerability was reported on 8/25/24 and fixed by 8/26/24, and it paid the reporting researcher a bounty despite not yet having a formal bug bounty program.

arc.net ↗

TRACKING TECH

The Apple App Store privacy label for Arc's iOS app (developer: The Browser Company of New York Inc.) discloses data not linked to identity including Analytics-related Identifiers, Device ID, and Usage Data tied to Product Interaction and App Functionality purposes, alongside a separate Data Linked to You category covering User Content and Identifiers.

apps.apple.com ↗

LAST REVIEWED 2026-08-19 · METHODOLOGY v1.7