privacy policy

• your wallet: which cards you hold, when you got them, bonus and credit progress, estimated monthly spend by category, your goals, region and settings. as a guest this stays in your browser. if you sign in, it's saved to your account so you can use it on other devices.
• account details (if you sign in): your email and login method, handled by our authentication provider.
• usage analytics: pages viewed, device type and approximate location via google analytics. without your consent this is cookieless and anonymous; with consent it also uses cookies and events like "added a card". analytics never receives your wallet contents.
• assistant requests: when you use the ai assistant, a summary of your wallet and your question are sent to process the reply.

card numbers, cvv codes, bank or card logins, account balances, government id numbers or your credit report.

• to run the service: calculate verdicts, track bonuses and save your wallet.
• to understand which features are useful and fix problems (analytics, with consent).
• to keep the service secure and prevent abuse.

we don't sell or rent personal information. we use these service providers to run pointlss:

• vercel (hosting)
• neon (database for saved wallets)
• clerk (sign-in and account security)
• google analytics (usage statistics; cookies only with your consent)
• anthropic (the ai assistant and card data checks; under its commercial api terms, inputs aren't used to train its models by default)

some of these providers store data in the united states, so your information may be processed outside canada and subject to the laws there.

we use your browser's local storage to keep your guest wallet and preferences, and essential cookies to keep you signed in. google analytics runs in consent mode: until you accept, it sets no cookies and only sends cookieless, anonymous signals (like a page load). analytics cookies are only set if you accept them, and you can change your mind any time with "cookie settings" in the footer.

• export your wallet from settings at any time.
• delete your saved wallet from your account page, and clear the local copy in settings.
• ask us to access, correct or delete your personal information, or close your account, by emailing hello@pointlss.com.

canadian residents have rights under pipeda and applicable provincial law. us residents may have rights under state privacy laws such as the ccpa/cpra. we'll respond within the time those laws require. if you're not satisfied, you can contact the office of the privacy commissioner of canada.

saved wallets are kept while your account is active and deleted when you delete them or your account. analytics data is kept for up to 14 months. server logs are kept for a short time for security.

data is encrypted in transit and stored with providers that encrypt it at rest. because we don't collect financial account details, a breach of pointlss couldn't expose your card or bank credentials.

pointlss is for adults. we don't knowingly collect information from anyone under the age of majority.

if we change this policy we'll update the date above. related: terms of use, disclosures.