Privacy policy
What we collect
- Account: your email address, and a record of your sign-in sessions (device type and times) so you can see and end them.
- Profile: home country, preferred currency, language and, optionally, timezone and display name.
- Loyalty data you choose to enter: programs, balances, status tiers, progress, goals and preferences.
- Program requests and alert preferences.
We do not collect loyalty passwords, bank or card details, inbox access, passport or travel document data.
Why
To provide recommendations and alerts you ask for, to run and secure the service, and to understand aggregate usage. Analytics never receive your balances, status or profile details.
Retention
Account data is kept while your account is open. When you delete your account, your personal and loyalty data are deleted, subject to short backup cycles. Security logs are kept for a limited period.
Your rights
You can export your data, delete individual programs or your whole account, change consent and alert preferences, and unsubscribe from emails. Under the GDPR you may also contact us to exercise your rights or complain to your data protection authority.
Cookies and similar storage
- Sign-in cookie (
__Host-pd_session): essential, set only when you sign in, removed when you sign out. - Your analytics choice: kept in your browser's local storage so we do not ask again.
- Google Analytics cookies (
_gaand_ga_followed by an id): set only if you choose "Accept analytics". They help us see which pages and tools are used. Advertising features and Google signals are switched off. You can change your choice at any time with "Cookie settings" in the footer, and declining removes these cookies. - Partner cookies: if you follow a link marked as possibly earning a commission, the partner's own site may set a cookie to credit the referral, under its own privacy policy.
Analytics is not used on signed-in pages such as My Dynasty or Settings.
Processors
- Hostinger: web hosting and the points-dynasty.com mailbox that sends sign-in links and alerts.
- Supabase: the database, hosted in the United States (Ohio region).
- GitHub: source code, and the scheduled jobs that check official program pages and send the alerts you asked for.
- Google Analytics: aggregate usage statistics, only with your consent.
Some of these providers process data outside the European Economic Area. Where they do, we rely on the transfer safeguards each provider offers. Ask us for details at any time.