AdRival

Privacy, in plain English

Last updated 20 August 2026 · AdRival is a trading name of Waives Analytics, the data controller for everything described here.

AdRival is a small product run by real people, and this page is written by us, not pasted from a template. It covers the two kinds of data we touch: the little we collect about you, and the advertising data the product is made of (which isn't about you at all).

What we collect about you, and why

If you request a free teardown We store the email address you give us, the sector you picked, the competitor name if you chose to share one, and standard technical details of the request (IP address, browser user-agent, timestamp). We use this to show you the teardown, follow up about the competitor you named, and — occasionally — tell you about AdRival itself. That's consent and legitimate interest doing the lifting, in UK GDPR terms.

If you're a client with a login We additionally store your login credentials (passwords are never kept in plain text) and which reports we've generated for you, because that's the service you're paying for (contractual necessity).

That's the complete list. We use Google Analytics to count visits, and it is off until you say yes: analytics runs cookieless with consent denied by default, and only if you accept on the banner does it set its one first-party analytics cookie (_ga) so we can tell visits apart. Decline and nothing is stored — we remember your "no" in your own browser and won't ask again. Advertising and ad-personalisation storage are permanently disabled either way: no ad pixel, no profiling. The only other cookie we ever set is the session cookie that keeps clients logged in.

What we will never do with your email

Sell it, rent it, or swap it. To anyone. Ever.
Sign you up to a "nurture sequence". You asked for a teardown, not a pen pal.
Keep mailing you after you say stop — every email we send has a working unsubscribe, and one click is enough.

The advertising data itself

The ads, promotions and brand activity inside AdRival reports come from the platforms' own public transparency archives — the Google Ads Transparency Center, Meta Ad Library and equivalents. This is information the platforms publish about companies' advertising, and we analyse it at brand level. It is not data about private individuals, and we don't combine it with any.

Who processes data on our behalf

Like every small software company, we rent infrastructure. Your data passes through: Render (application and database hosting), Cloudflare (DNS, CDN and security in front of the site), and Zoho (our email). Each holds only what it needs to do its job, under its own GDPR-compliant terms. Nobody else gets access.

How long we keep things

Lead details: until you ask us to delete them, or until it's obvious you're not interested (we prune stale leads rather than hoard them). Client account data: for the life of the account plus whatever UK tax law makes us keep about invoices.

Your rights

UK GDPR gives you the right to see what we hold about you, correct it, delete it, take it elsewhere, or object to how we use it. With us that's not a form and a 30-day wait — email [email protected] and a human (Neil, specifically) will sort it, usually same day. If you're unhappy with how we handle it, you can complain to the ICO.