Legal

Privacy Policy

Last updated: 2026-07-07

This policy describes what The Points Standard actually collects and does today. We keep it current as our tooling changes rather than pre-describing features we haven't built.

What we collect

• Newsletter email address, only if you submit the signup form for The Standard Brief. Once our email provider is connected, your address will be sent to that provider solely to deliver the newsletter, and every issue will include a working unsubscribe link. Until that provider is connected, submitting the form does not transmit your email address anywhere — it is held only in your browser for that page view and is not saved to any database or server.
• Aggregate site analytics(pages viewed, referrer, approximate region, device type) via Google Analytics (GA4), on deployments where it is enabled. GA4 uses cookies to distinguish visitors. If analytics isn't enabled for a given deployment, no analytics script runs and no analytics cookies are set.
• Local browser storage, not a server-side account.We use your browser'ssessionStorage(cleared when you close the tab) to remember, for that browsing session only, whether you've already subscribed or dismissed a signup prompt, so we don't repeat it. This never leaves your device.

What we don't do

• We do not collect financial information, credit details, or credit card application data. Applying for a card happens entirely on the issuer's own site, under the issuer's own privacy policy.
• We do not sell or rent personal information to third parties.
• We do not run advertising trackers, retargeting pixels, or cross-site ad cookies.

Third parties who may process data on our behalf

• Vercel (hosting) processes standard server logs (IP address, request metadata) to serve the site.
• Google Analytics (GA4), where enabled, processes aggregate usage data as described above.
• An email service provider, once connected, will process newsletter subscriber addresses solely to send The Standard Brief. We'll name the provider here once it's live.

We do not currently run live affiliate or referral links (see our Advertising Disclosure). When they go live, clicking one will take you to the issuer's site, which sets its own cookies and has its own privacy policy — we don't control or see what happens after you leave our site.

Retention

Newsletter addresses are kept only as long as you remain subscribed and are deleted on unsubscribe or on request. Aggregate analytics data is retained per Google's standard GA4 retention settings and isn't linked back to an individual by us.

Your choices

• Unsubscribe: every newsletter issue will carry an unsubscribe link once sending is live; you can also email us to be removed.
• Access or deletion request: email hello@thepointsstandard.com and we'll confirm what we hold (if anything) and delete it on request.
• Cookies: use your browser's cookie controls to block or clear GA4 cookies at any time; the site works fully without them.

Jurisdiction

The Points Standard is a Canadian publication and this policy is written to meet Canadian privacy law (PIPEDA) and Canada's Anti-Spam Legislation (CASL) for our newsletter. If you're visiting from outside Canada, your information may be processed in Canada or by providers located elsewhere (e.g., the U.S. hosting/analytics infrastructure above).

Contact

Privacy questions or deletion requests: hello@thepointsstandard.com.