Legal
Privacy Policy
Last updated: 3 July 2026
This page explains, in plain language, what data we collect when you use this site, why we collect it, how long we keep it, and the rights you have over it.
Who is responsible
The data controller for this website is Unfair Advantage Marketing LLC (trading as Unfair), Shams Free Zone, Sharjah, United Arab Emirates. The person responsible for this site is Elias Oender. You can reach us any time at [email protected].
What we collect, and why
- The URL you submit to the scanner. When you run the free marketing scan, we fetch that public URL and check it for marketing infrastructure. We use it only to generate your result.
- Your email and the answer you give at the report gate (your monthly ad spend), only when you choose to unlock the full scan report or use a contact form. We use the email solely to send you the result you asked for.
- Booking details you enter when you schedule a call. The call is booked through Cal.com.
- Basic technical log data (IP address, browser type, time of request), recorded by our server and our CDN for security and abuse prevention. Standard for any website, kept only briefly.
- Analytics and marketing data collected through the cookies and pixels listed below, but only if you accept them in the consent banner. Before you accept, none of these load.
Yes, we run analytics and marketing tools, and we would rather be plain about it than hide it. We do not sell your data to anyone.
Cookies, analytics and marketing
We use the following third-party tools for analytics and marketing. They load only after you click “Accept all” in our consent banner. If you reject, or simply do not accept, none of them run and no marketing cookies are set. Google Analytics operates under Google Consent Mode v2 with consent defaulted to denied, and the Meta pixel is held in a revoked state until you grant consent.
- Google Analytics 4 (Google Ireland): aggregate site usage and traffic measurement.
- Meta Pixel (Meta Platforms Ireland): measures ad effectiveness and builds advertising audiences.
- Hotjar (Hotjar Ltd, Malta): anonymised heatmaps and session recordings to improve the site.
- Albacross (Albacross Nordic AB, Sweden): identifies the company, not the individual, behind business visits.
- Mailchimp (Intuit Inc.): connected-site tag for marketing audiences and email.
For visitors in the EU, EEA, United Kingdom, and Switzerland we show a consent banner and load nothing until you choose. Visitors outside those regions are shown the site with analytics enabled by default, consistent with local law. You can reopen the choice and withdraw consent at any time by running window.ufConsentReset() in your browser console, or by clearing this site's cookies and local storage.
Legal basis
Where the GDPR applies, we rely on your consent (Art. 6(1)(a)) for anything you submit through a form and for all analytics and marketing cookies and pixels described above, and on our legitimate interest (Art. 6(1)(f)) in keeping the site secure for the short-lived technical logs. You can withdraw consent at any time, with effect for the future.
How long we keep it
- Email addresses and assessment results: until you ask us to delete them.
- Scan inputs: kept only as long as needed to deliver and improve your result.
- Security logs: rotated and deleted on a short cycle (within weeks).
Who processes the data for us
- Hetzner (Germany) hosts our server.
- Supabase (EU region) stores form submissions in a database.
- Cloudflare provides CDN and security in front of the site.
- Our own self-hosted n8n instance moves a submission into the database and sends the result.
- Cal.com handles call bookings when you choose to schedule one.
- Google, Meta, Hotjar, Albacross, and Mailchimp process analytics and marketing data as described above, only after you consent.
The site infrastructure and database sit on EU-region servers. The controlling company is established in the UAE.
International transfers
Some of the providers above (for example Google, Meta, and Mailchimp) may process data on servers outside the EU, including in the United States. Where that happens, the transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.
Your rights (GDPR)
If you are in the EU or EEA, you have the right to access the data we hold about you, have it corrected, have it deleted, restrict or object to how we use it, receive a copy in a portable format, withdraw consent at any time, and complain to your local data protection supervisory authority.
To exercise any of these, email [email protected] and we will act on it.
Changes to this policy
If we change how we handle data, we will update this page and the date at the top.
Unfair Advantage Marketing LLC operates under the laws of the United Arab Emirates. We aim to keep this policy accurate and up to date. If you notice anything incomplete, tell us at [email protected] and we will fix it.