Privacy Policy

Last updated: September 1, 2026

1. Data Controller

UnknownIndex (unknownindex.com) is the data controller responsible for your personal data. For privacy-related inquiries, please use our contact page.

2. Information We Collect

We collect the following personal data only when you actively provide it:

  • Site submissions: Website name, URL, description, suggested category, and your email address.
  • Contact form: Your name, email address, and message content.
  • Analytics (with consent): Anonymised usage data including pages visited, time on site, and traffic sources via Google Analytics GA4. IP addresses are anonymised before processing.
  • Advertising (with consent): When you consent to marketing cookies, Google AdSense may process advertising identifiers and ad interaction data to deliver and, where consented, personalise ads.

We do not collect sensitive personal data, financial information, or data from children under 16.

3. Legal Basis for Processing

  • Submissions and contact: Contract performance and legitimate interest (Art. 6(1)(b) and (f) GDPR).
  • Analytics: Your explicit consent (Art. 6(1)(a) GDPR) — only collected after you accept analytics cookies.
  • Strictly necessary functionality: Legitimate interest (Art. 6(1)(f) GDPR).

4. How We Use Your Data

  • Submission data is used solely to review and potentially list suggested sites.
  • Email addresses from submissions are used only to communicate the review decision.
  • Contact form data is used only to respond to your enquiry.
  • Analytics data is used to understand how the site is used and improve content.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

5. Cookies and Tracking

We use cookies and localStorage for consent storage and, with your permission, for Google Analytics. No tracking or advertising cookies are set without your explicit consent. For full details of every cookie we use, see our Cookie Policy. You can manage or withdraw your consent at any time via the cookie preferences banner.

6. Third-Party Services

When you consent to analytics, your anonymised usage data is transmitted to Google LLC (Google Analytics GA4). When you consent to marketing/advertising, data is also transmitted to Google LLC (Google AdSense) for ad delivery and, where consented, personalisation. Google acts as a data processor for these services. Data may be transferred to the United States under the EU-US Data Privacy Framework and Standard Contractual Clauses. See Google's Privacy Policy and how Google uses advertising cookies for details. You can manage ad personalisation directly at Google Ads Settings.

Transactional emails (submission notifications) are sent via our own mail server. No email marketing platform is used.

7. Data Retention

  • Submission data is retained for as long as the listing is active or as needed to process the review.
  • Contact form messages are retained for up to 12 months.
  • Analytics data is retained for 26 months (Google Analytics default).
  • Cookie consent preferences are stored for 365 days.

8. Your Rights

Under the GDPR and UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request erasure of your data ("right to be forgotten").
  • Object to or restrict processing.
  • Withdraw consent at any time without affecting prior lawful processing.
  • Lodge a complaint with your supervisory authority (e.g. ICO in the UK, or your national DPA in the EU).

Under the CCPA, California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, please contact us via our contact page.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is transmitted over HTTPS. Access to submission and contact data is restricted to authorised administrators only.

10. Children's Privacy

UnknownIndex is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the date at the top of this page. We encourage you to review this policy periodically.

12. Contact

For any privacy-related questions or to exercise your rights, please contact us via our contact page. We do not publish email addresses to protect against spam.