Legal

Privacy Policy

Last updated: 2026-07-13

This policy describes what The Points Standard actually collects and does today. We keep it current as our tooling changes rather than pre-describing features we haven’t built. The Points Standard is published by Vexiro Group, a registered business based in Vancouver, British Columbia — full contact details are at the end of this policy.

What we collect

• Newsletter email address, only if you submit the signup form for The Standard Brief. Your address is sent to our email provider, Resend, and stored on our subscriber list solely to send you The Standard Brief and a one-time welcome email. Every email includes a working unsubscribe link, and you can unsubscribe at any time.
• Aggregate site analytics (pages viewed, referrer, approximate region, device type) via Vercel Web Analytics and PostHog. Both are configured to be privacy-friendly and cookieless — they set no cookies, do not track you across other sites, and do not build an individual profile of you. We deliberately run PostHog without persistent identifiers, so we cannot recognize you on a return visit.
• Local browser storage, not a server-side account. We use your browser’ssessionStorage (cleared when you close the tab) to remember, for that browsing session only, whether you’ve already subscribed or dismissed a signup prompt, so we don’t repeat it. One thing is stored for longer: if you answer the “was this review useful?” question at the bottom of a card review, we keep that answer in localStorage under a key naming that card (for exampletps-review-feedback-amex-cobalt), so we don’t ask you the same question again on a later visit. It records only your yes/no answer for that card — no identifier, nothing about you. All of this stays on your device and is never sent to us; clearing your browser storage removes it.

What we don’t do

• We do not collect financial information, credit details, or credit card application data. Applying for a card happens entirely on the issuer’s own site, under the issuer’s own privacy policy.
• We do not sell or rent personal information to third parties.
• We do not run advertising trackers, retargeting pixels, or cross-site ad cookies.

Third parties who may process data on our behalf

• Vercel (hosting and Web Analytics) processes standard server logs (IP address, request metadata) to serve the site, plus cookieless aggregate usage data as described above.
• PostHog (product analytics) processes cookieless, anonymous usage events — which pages and tools were used, and in what order — so we can see where readers get stuck. It is configured without persistent identifiers or person profiles, and stores this data on servers in the United States.
• Resend (email) processes your newsletter address to store you on our subscriber list and deliver The Standard Brief and the welcome email. Resend stores this data on servers in the United States.
• Cloudflare provides DNS and bot protection (Turnstile) on our signup form; the Turnstile check processes limited technical data, including your IP address, to confirm you’re a real person.
• Fastmail hosts our inbound mailboxes, so any email you send to our contact addresses is processed and stored by Fastmail.

We do not currently run live affiliate or referral links (see our Advertising Disclosure). When they go live, clicking one will take you to the issuer’s site, which sets its own cookies and has its own privacy policy — we don’t control or see what happens after you leave our site.

Retention

Newsletter addresses are kept only as long as you remain subscribed and are deleted on unsubscribe or on request. Aggregate analytics data is retained per Vercel’s and PostHog’s standard retention periods and isn’t linked back to an individual by us — with no persistent identifier, it can’t be.

Your choices

• Unsubscribe: every email we send carries a one-click unsubscribe link; you can also email us to be removed.
• Access or deletion request: email hello@thepointsstandard.com and we’ll confirm what we hold (if anything) and delete it on request.
• Cookies: we don’t use analytics or advertising cookies — our analytics is cookieless. Cloudflare’s bot protection may set a strictly necessary cookie to confirm you’re human. Use your browser’s controls to manage cookies; the site works without non-essential ones.

Jurisdiction

The Points Standard is a Canadian publication and this policy is written to meet Canadian privacy law — the federal PIPEDA and British Columbia’s Personal Information Protection Act (PIPA) — and Canada’s Anti-Spam Legislation (CASL) for our newsletter. Your information may be processed in Canada or by providers located elsewhere: the hosting, analytics, and email providers named above operate infrastructure in the United States, where your information is subject to U.S. law.

Contact

The Points Standard is published by Vexiro Group, a registered business based in Vancouver, British Columbia. Mailing address: 329 Howe St, Unit #606, Vancouver, BC V6C 3N2, Canada.

Privacy questions, and requests to access, correct, or delete your information, go to our privacy contact at hello@thepointsstandard.com — we respond to all requests and there is no fee.