Privacy Policy
The short version.
The Points Repricer extension does not collect or share your data. There is no account, and everything it records about your bookings stays in your own browser, on your own device — it is never sent to us or to anyone else, and it is deleted when you uninstall.
Some pages in the extension may show advertising. An ad may be chosen based on which loyalty programs you use, but your bookings themselves are never shared with an advertiser — see section 5.
If you join the waiting list on this website, we store your email address so we can email you about the launch and the beta. That's the only personal information we hold, and you can ask us to delete it at any time.
1. Who we are
PointsRelated ("we", "us") is operated by Tom Windscheffel, based in the United Kingdom. If you have any question about this policy or your data, contact us at points@pointsrelated.com.
2. The Points Repricer browser extension
What it collects: nothing
The extension does not collect your data. There is no account and no sign-up. Its own code sends nothing anywhere: it contains no analytics, no tracking pixels, and no third-party scripts, and it never monitors how you use it.
The one thing that can load from outside is an advertisement on some of the extension's pages. How that works — and what an advertising partner can and cannot learn — is set out in section 5.
What it reads, and where that stays
To do its job, the extension reads booking information from pages you are already signed in to and viewing yourself, on these sites only:
- marriott.com
- hilton.com
- hyatt.com
- ihg.com
- easyjet.com
From those pages it records details of your bookings — such as the hotel or flight, the dates, the price or points cost, the booking reference, and the price each time it re-checks. It also opens pages on those same sites in background tabs in order to look up the current price of something you are tracking.
All of that is stored locally in your browser's own extension storage
(chrome.storage.local). Your bookings are never sent anywhere — not to us, and
not to any advertiser or partner. We cannot see them. Nobody else can see them. (Section 6
describes an optional, opt-in way to contribute anonymous price observations — never your
bookings — if we ever build it.)
Your credentials
The extension never asks for, reads, or stores your usernames, passwords, or payment details for any airline or hotel program. It only reads what is already displayed on a page you have opened while signed in as yourself.
Permissions, and why they're needed
- Storage — to save your tracked bookings and price history on your device.
- Alarms — to run the once-a-day background price check.
- Notifications — to tell you when a price has dropped.
- Access to the five sites listed above — to read your bookings and look up current prices on those sites. The extension has no access to any other website.
Deleting your data
Uninstalling the extension deletes everything it has stored. You can also delete individual bookings, or export a copy of everything, from the extension's own Settings page at any time. Because we never receive this data, there is nothing for you to request from us.
3. This website
The waiting list
If you enter your email address into the waiting-list form, we store:
- your email address;
- the date and time you signed up;
- a short tag noting where the signup came from — the site or link that brought you here, if any (for example, a referring website's domain, or a campaign tag on the link you used);
- a status showing whether you have been invited to the beta yet.
We do not store your IP address, your browser details, or any tracking identifier alongside it. We use this only to email you about the launch and the private beta. We will not send you unrelated marketing, and we will not sell, rent, or share the list.
Lawful basis: we process your email address on the basis of your consent, given when you submit the form. You can withdraw that consent at any time (see section 7).
How long we keep it: until you ask us to remove it, or until the waiting list is no longer in use, whichever comes first.
Hosting and cookies
This website is hosted on Cloudflare Pages, and waiting-list entries are stored in a Cloudflare database. Cloudflare therefore processes this data on our behalf as our hosting provider, and may also process limited technical information (such as IP addresses) in server logs for security and abuse prevention, as any web host does.
This site sets no cookies. To see how many people visit and where they arrive from, we use Cloudflare Web Analytics, which counts visits without cookies and without identifying you — it is built not to track individuals, and it does not follow you to other sites. The fonts used are served from this site itself, not from a third party. If any of this changes — for example, if we add advertising to the site — we will update this policy and, where the law requires it, ask for your consent before any non-essential cookies are set.
4. What we never do
- We never sell or rent your personal information.
- We never share your bookings with anyone — we never receive them in the first place.
- We never let an advertiser or partner see your bookings. An ad may know which category it was shown in, never what you have actually booked (see section 5).
- We never use analytics or tracking to monitor how you use the extension.
- We never ask for your airline or hotel passwords.
5. Advertising, affiliate links and sponsored content
Our tools are free to use. To support them, we may show advertising and include affiliate links and sponsored content — in the extension and on this website. Where we do this, we will make it clear that something is an advertisement, an affiliate link, or a sponsored placement.
Advertising inside the extension
Some pages in the extension, such as the dashboard, may show advertising from third-party advertising partners. These ads load in an isolated frame from our own website, not as code running inside the extension itself. When an ad is shown, the advertising partner may set its own cookies and collect standard advertising data — such as your IP address and device details — under its own privacy policy, in the same way an ad on any website does.
Context-aware ads: what is used, and what never is
We may choose which ad to show based on which loyalty programs you use in the extension — for example, showing an offer from one hotel program to someone who tracks stays with another. This is the line we hold:
- The choice is made on your device. The extension itself decides which category of ad to show, using what it already knows locally about the programs you use.
- Your bookings are never used for targeting and never sent to an advertiser. Not the hotel or flight, not the dates, not the prices, not the booking reference. Those stay on your device, full stop.
- At most, a partner learns a category. An advertising partner may learn that an ad from a particular category was shown — for instance, that you were shown an offer aimed at people who use a certain program. It never receives the bookings behind that.
- You can turn it off. Where we show context-aware ads, the extension's settings will let you switch them off and see non-personalised ads instead.
Affiliate links and sponsored content
A link to a loyalty program, a booking site, or a travel credit card may earn us a commission if you use it. Here is what that does, and does not, mean for your data:
- Showing you a link sends nothing anywhere. An affiliate link is just a link. Nothing about you is transmitted when it appears on screen.
- Clicking one takes you to the partner's site. From that point you are on their site, under their privacy policy, and they may set their own cookies — exactly as with any link on the internet. We do not control that.
- Our affiliate links identify us, not you. They carry a fixed code telling the partner the referral came from PointsRelated. They never carry an identifier that is tied to you personally.
6. Future changes to what we collect
We may in future want to use anonymous, aggregated pricing information — for example, to show whether a rate is typically good for a given hotel and date — built from observations contributed by people using the extension.
We are not doing this today — nothing about your bookings leaves your device. If we ever do build it, we commit now to the following, so that this is an addition you choose rather than a change made to you:
- It will be opt-in and off by default. Nothing will ever be shared unless you explicitly turn it on yourself. It will never be opt-out, and never silent.
- It will be aggregated and de-identified. It would cover price observations only — such as "this property, these dates, this rate" — never your bookings, your booking references, your name, or any identifier that could tie observations back to you.
- We will tell you before it happens. We will update this policy and give notice in the extension itself, before any such feature becomes available.
7. Your rights
Where data protection law applies to you (including the UK GDPR and EU GDPR), you have the right to access the personal information we hold about you, to have it corrected or deleted, to withdraw consent, and to complain to your local data protection authority.
In practice, the only personal information we hold is your waiting-list email address. To have it removed, or to ask what we hold, email points@pointsrelated.com and we will action it. Every email we send you will also include an unsubscribe link.
8. Children
PointsRelated and its tools are not directed at children and is not intended for use by anyone under 16.
9. Changes to this policy
This policy describes how PointsRelated and its tools work as of the version and effective date shown at the top of this page. If it changes, we will update the version number and effective date here.
If a change materially affects what we collect or how we use it, we will not apply it quietly — we will give notice in the extension itself before it takes effect, and, where the change involves sharing anything new, we will ask for your consent first (see section 6).
10. Contact
Questions, deletion requests, or anything else about this policy: points@pointsrelated.com.