Legal
Privacy Policy
Last updated: 6 November 2026
This page explains, in plain language, what data we collect when you use this site, why we collect it, how long we keep it, and the rights you have over it.
Who is responsible
The data controller for this website is Unfair Advantage Marketing LLC (trading as Unfair), Shams Free Zone, Sharjah, United Arab Emirates. The person responsible for this site is Elias Oender. You can reach us any time at [email protected].
What we collect, and why
- The URL you submit to the scanner. When you run the free marketing scan, we fetch that public URL and check it for marketing infrastructure. We use it only to generate your result.
- Your email and the answer you give at the report gate (your monthly ad spend), only when you choose to unlock the full scan report or use a contact form. We use the email to send you the result you asked for. Once analytics and marketing tools are active for you (see below), the scanner also passes your verified email in hashed form to Google and Meta to measure our ads. Your email only joins our newsletter if you sign up for it.
- Booking details you enter when you schedule a call. The call is booked through Cal.com.
- Basic technical log data (IP address, browser type, time of request), recorded by our server and our CDN for security and abuse prevention. Standard for any website, kept only briefly.
- Analytics and marketing data collected through the cookies and pixels listed below, but only if you accept them in the consent banner. Before you accept, none of these load.
Yes, we run analytics and marketing tools, and we would rather be plain about it than hide it. We do not sell your data to anyone.
Cookies, analytics and marketing
We use the following third-party tools for analytics and marketing. They load only after you click “Accept all” in our consent banner. If you reject, or simply do not accept, none of them run and no marketing cookies are set. Google Analytics operates under Google Consent Mode v2 with consent defaulted to denied, and the Meta pixel is held in a revoked state until you grant consent.
- Google Analytics 4 (Google Ireland): aggregate site usage and traffic measurement.
- Meta Pixel (Meta Platforms Ireland): measures ad effectiveness and builds advertising audiences.
- Hotjar (Hotjar Ltd, Malta): anonymised heatmaps and session recordings to improve the site.
- Albacross (Albacross Nordic AB, Sweden): identifies the company, not the individual, behind business visits.
- Mailchimp (Intuit Inc.): connected-site tag for marketing audiences and email.
For visitors in the EU, EEA, United Kingdom, and Switzerland we show a consent banner and load nothing until you choose. Visitors outside those regions are shown the site with analytics enabled by default, consistent with local law. You can reopen the choice and withdraw consent at any time by running window.ufConsentReset() in your browser console, or by clearing this site's cookies and local storage.
Newsletter
The Unfair Advantage newsletter goes out once a week. After you confirm, you also get a welcome mail and, about 48 hours later, a mail with some of our best articles. The mails carry our articles and insights, plus offers for our own services.
- How you sign up (double opt-in). If you use a newsletter form on this site, we first email you a confirmation link, and you only get the newsletter after you confirm. If you tick the newsletter box in the scanner, the six-digit code you enter from your inbox confirms your address, so we send no extra link.
- What we store. Your email address, the language of your edition, the form and page you signed up on, when you signed up, and the status of your subscription. When you confirm through the link, we also store the IP address you confirmed from, as proof of your signup.
- Open and click tracking. Weekly issues contain an invisible tracking pixel, and their links can be tracked. Listmonk records under your email address when you open an issue and, for tracked links, when you click one. We review this per person, including in an internal weekly report. To stop it, unsubscribe.
- Legal basis. Where the GDPR applies, we send the newsletter and track opens and clicks on the basis of your consent (Art. 6(1)(a)). You can withdraw it at any time, with effect for the future, by unsubscribing.
- Unsubscribing. Every newsletter mail has an unsubscribe link. One click on it unsubscribes you, with no login and no reason needed.
Legal basis
Where the GDPR applies, we rely on your consent (Art. 6(1)(a)) for anything you submit through a form and for all analytics and marketing cookies and pixels described above, and on our legitimate interest (Art. 6(1)(f)) in keeping the site secure for the short-lived technical logs. You can withdraw consent at any time, with effect for the future.
How long we keep it
- Email addresses and assessment results: until you ask us to delete them.
- Newsletter addresses: until you ask us to delete them, whether you confirmed or not. Unsubscribing stops the mails but does not delete your address or your open and click history. They stay on file, marked as unsubscribed, so we do not mail you again. If you ask us to delete them, we remove them from Listmonk and the signup table. Our encrypted backups age out after about 60 days.
- Scan inputs: kept only as long as needed to deliver and improve your result.
- Security logs: rotated and deleted on a short cycle (within weeks).
Who processes the data for us
- Hetzner (Germany) hosts our server.
- Supabase (EU region) stores form submissions in a database.
- Cloudflare provides CDN and security in front of the site.
- Our own self-hosted n8n instance moves a submission into the database and sends the result.
- For the newsletter, our self-hosted Listmonk and n8n on our Hetzner server store subscribers and prepare the mails. Resend sends the weekly issues, Google Workspace sends the confirmation, welcome and best-of mails through our Gmail account, and Google Drive holds our encrypted backups. Supabase keeps a record of each signup, and Cloudflare sits in front of news.unfair.at, which serves the confirmation pages and the tracking pixel.
- Cal.com handles call bookings when you choose to schedule one.
- Google, Meta, Hotjar, Albacross, and Mailchimp process analytics and marketing data as described above, only after you consent.
The site infrastructure and database sit on EU-region servers. The controlling company is established in the UAE.
International transfers
Some of the providers above (for example Google, Meta, and Mailchimp) may process data on servers outside the EU, including in the United States. Where that happens, the transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.
Your rights (GDPR)
If you are in the EU or EEA, you have the right to access the data we hold about you, have it corrected, have it deleted, restrict or object to how we use it, receive a copy in a portable format, withdraw consent at any time, and complain to your local data protection supervisory authority.
To exercise any of these, email [email protected] and we will act on it.
Changes to this policy
If we change how we handle data, we will update this page and the date at the top.
Unfair Advantage Marketing LLC operates under the laws of the United Arab Emirates. We aim to keep this policy accurate and up to date. If you notice anything incomplete, tell us at [email protected] and we will fix it.