Last updated: 16 September 2026
Uncover DXB is a Dubai offers and dining discovery site run by a solo founder. This policy explains what happens to your information when you use it. It describes what the site actually does, not a generic template.
You can browse the entire site without an account and without giving us anything. If you create an account, we hold your email address, the offers you save, whether you asked for our offers email, and the sign-in details described below. We never ask for a password. We never ask for your name, though Google passes it to us if you sign in with Google. Otherwise the only personal information we hold is an email address you choose to type into a form.
Browsing requires no information from you and creates no entry in our database. Google Analytics does record the visit, as described below.
Signing in with an email code or with Google creates a free account, which makes you an Uncover DXB member. For each account we store:
We use your email address to send sign-in codes and, only if you ticked the box, our offers email.
Reporting an issue stores the type of issue, your description, the page you were on, and the offer and venue if you reported from an offer page. There is an optional email field. Leave it blank and we have no way of identifying you.
We use this to correct the listing, and to reply if you gave us an email.
Suggesting something stores the type of suggestion, the venue name, the offer name, the location and any details you write, plus an optional email address.
We use this to research and verify the suggestion before deciding whether to add it.
The description and details fields accept anything you type. Please do not put personal information in them that you would not want stored.
If you are not signed in, saved offers stay in your own browser's storage and never reach us. When you sign in, offers saved in that browser are added to your account so they appear on every device where you sign in. When you sign out, they are removed from that browser and stay on your account.
Tapping Still Available records that the offer was confirmed, and when, so the page can show how many people confirmed it in the last month. Tapping No longer valid sends us a report naming the offer and the page you were on. Neither stores your email or anything else that identifies you, even when you are signed in. Your browser remembers which you tapped, so the same tap is not counted twice.
The founder signs in to a private admin area the same way. Having an account gives no access to it. Admin access is granted only by hand in our database.
Running the site means some third parties necessarily see certain information.
Cloudflare hosts the site and serves its images. Every visit passes through Cloudflare, so it processes connection information including your IP address as part of delivering the page. Our two small background services run on Cloudflare's free tier, where request logs are kept for three days.
Supabase stores accounts, saved offers and email choices, the form submissions and offer confirmations described above, and runs sign-in for everyone. Supabase states that stored data is encrypted at rest. Using a form or your account sends information to Supabase, so it also processes your connection information at that moment.
Resend sends our sign-in codes and any offers email. It receives your email address and the message, and keeps a record of each email for 30 days.
Google sign-in. If you choose Continue with Google, Google confirms who you are and shares your email address, name and profile picture address. Google knows you signed in to Uncover DXB. Google's screen names our sign-in provider's address, which ends in supabase.co, rather than uncoverdxb.com.
Cloudflare Turnstile checks that a person, not a bot, is asking for a sign-in code. It processes your IP address and browser and connection details to do that. Cloudflare states it uses them only to detect bots.
Google Analytics tells us how many people visit and which pages they read. It sets its own cookies and collects device and approximate location information. Event data is kept for 2 months and user data for 14 months. Google states that it does not store IP addresses for visitors in the EU, UK and Switzerland, and uses them only to estimate location.
Google Fonts supplies the typefaces, which means Google receives your IP address when a page loads.
The map page draws its map, labels and pins from files on our own site, delivered by Cloudflare like every other page. Opening it sends nothing to an outside map service. The map data comes from OpenStreetMap, but no request from you reaches OpenStreetMap. Tapping Directions opens Google Maps, which is covered under links out below.
Links out. Tapping through to a venue's website, Google Maps or our Instagram takes you to a service with its own policy. We have no control over what those collect.
The site itself sets no cookies. Google Analytics sets its own.
Saved offers, your sign-in and similar preferences use your browser's local storage rather than cookies. Signing out removes your sign-in and saved offers from that browser.
Your account, saved offers and email choice are kept until you delete your account. Deleting it removes all of them from our database straight away, including the sign-in details for your devices. Deleting an account does not remove anything you sent through the report or suggestion forms, because those are stored separately and are not linked to your account. Resend's record of emails sent to you lasts 30 days.
Reports, suggestions and offer confirmations are kept until they are removed by hand. There is no automatic deletion, so assume a submission is held indefinitely unless you ask us to remove it.
Anything in your browser's storage stays until you clear it.
Google Analytics and Cloudflare apply their own retention, described above.
Change your email choice. Turn our offers email on or off on your account page at any time. Every offers email will also carry an unsubscribe link.
Delete your account. Use Delete my account on your account page. It removes your account, saved offers and email choice from our database straight away, with no need to email us. Two things are not covered by that: Resend keeps a record of emails already sent to you for 30 days, and anything you sent through the report or suggestion forms is stored separately and is not linked to your account, so it stays until you ask us to remove it.
Do not give us an email. Both forms work without one.
Ask us to delete a submission. Email us and we will remove it. If you did not leave an email address we may not be able to find your submission, since we hold nothing else that identifies you.
Block analytics. A browser setting or extension stops Google Analytics loading. The site works normally either way.
Clear your own device. Clearing your browser data removes saved offers and every other local preference.
You must be 18 or over to create an account. The site lists venues and offers, many of which involve alcohol and are intended for adults. It is not designed for or directed at children.
Offers that include alcohol are only for people of legal drinking age, which is 21 in Dubai.
If this policy changes, the date at the top changes with it.
Questions about privacy, or requests to remove a submission: