Running the honest math…
What we collect, what we deliberately don't, and the choices you have. Honest Points is an independent, early-stage travel-rewards research tool, and privacy here is mostly a story about how little data there is to begin with.
The short version
Honest Points ("Honest Points," "we," "us") is an independent project: a free research and education tool for travel rewards. It is operated by an individual, not a company, bank, or card issuer. We are verifying a contact inbox; see the contact page for its current status before sending a privacy request.
Signup for updates is not open yet. If you sign up once it opens, we send the email address you enter to Resend, our email provider. We plan to send occasional notes, about twice a month, on devaluations and offers worth a look. Never card-pushing. Each email will have a one-click unsubscribe, and unsubscribing stops further emails.
If analytics is enabled on the site, we use Plausible. It sets no cookies and reports aggregate page views and tool events. Events can include the route, cabin, whether you supplied a cash price, how you started a search, and the verdict. Finder events include your goal and whether spending is estimated. Link events can include a card ID, whether a link is paid, its placement, or the kind of booking link. Copy and upload events include the tool used or how many fields were filled. We use these events to see which tools and pages are useful.
We use your browser's local storage (under keys like "honestpoints.bestfit.v1") to remember the cards and points you enter and your trip. Calculations run in your browser. Clearing this site's browser data removes that saved copy. Your credit score, if you enter one, is used only in your browser to show approval odds and is never transmitted.
When you copy a verdict link, its URL includes your route, dates, cabin, travelers, selected cards, points balances, and any cash price or alliance you entered. Anyone with the link can read these details. Opening or reloading the link sends the full request URL to our hosting provider. Share it only if you are comfortable including those details.
On the compare page, when AI is enabled and at least two cards are selected, an automatic card-comparison summary sends the selected card IDs and your chosen priority to our server. The summary is built from public card facts, our computed estimates for those cards, and your chosen priority, which our server sends to our AI provider, Anthropic. Our computed estimates include bonus value, first-year and ongoing value, honest score, and flexibility. A fare screenshot is sent through our server to Anthropic only when you choose to upload one. We do not save screenshots in our application. Anthropic's privacy policy applies to the data it receives. You can always enter the fare manually.
Trip descriptions and help search stay in your browser as raw text. They are not sent to Anthropic. Parsed trip fields can be included in shared verdict URLs and optional analytics events, as described above. Sending feedback is a separate action, described below.
Our AI usage ledger stores a reservation ID, timestamps, route, model, outcome, and token counts when available. It does not store prompts, screenshots, card facts, IP addresses, or user identifiers. If the finalization acknowledgment fails, we log only the route and processing stage with the warning.
When you click a link to price a flight, find a hotel, search award space, or view a card, you leave our site for a third party (such as Google Flights, a hotel-booking partner, seats.aero, or a card issuer). The link may carry your search details, like the route, dates, or number of travelers, and, for booking partners, our affiliate ID. We never pass your name, email, or wallet. Once you're on their site, their privacy policy applies, not ours.
If you send feedback through the help widget, we send your message, the page path, and an email address if you choose to include one through Resend to our configured inbox. We use them to read and respond to feedback. The widget confirms acceptance for delivery only after the provider acknowledges it. If submission fails or feedback is unavailable, it keeps your message so you can retry or copy it.
Honest Points also offers a free browser extension, the redemption grader. It collects nothing: it has no account, no analytics, and it does not contact any server. Its only permission is the right-click menu, which it uses to add "Grade this redemption." It reads only the text you select when you choose that menu item and the numbers you type into its popup, and it uses them in your browser to work out a grade. Nothing is saved or sent anywhere. The valuations it grades against are bundled inside the extension, so it works without a connection.
The popup has links to this site. If you click one, it opens honestpoints.app in a new tab, and this policy covers that visit like any other. Those links add a "utm_source=extension" tag to the address so our anonymous, cookie-free analytics (if enabled) can count visits that came from the extension.
Honest Points is meant for adults making travel and credit decisions and is not directed at children under 18. We don't knowingly collect information from them. The credit cards discussed here require you to be at least 18 (or the age of majority where you live) anyway.
The site is served only over HTTPS. Because there are no accounts or passwords, there's no login database to breach. Any secrets we use to talk to providers like Resend live in server-side configuration, never in the code or the browser. No system is perfectly secure, but the most privacy-protective design is to collect as little as possible: which is what we've done.
If we add features that change what we collect, we'll update this page and the "Source date" above; significant changes will be noted on the site. For privacy questions or requests, check the contact page for the current inbox status.
See also our Terms of Use and how we make money.