Privacy

Award Tracker is operated independently. It partners with The Plane Prince Travel, an independent travel advisor based in New Jersey, USA, which fulfils concierge requests. This Privacy Policy explains what Award Tracker collects, how it is used and protected, who can see it, and how you can remove it, whether you use the free tracker and tools or ask the concierge to book an award for you.

1. Information I collect

I collect only what you choose to enter, plus what the site needs to keep you signed in:

• Your account: the name and email address you sign up with, and a hashed password. Your password is never stored in readable form.
• What you enter: flight and hotel redemptions (dates, routes or properties, programs, points, fees, cash prices, confirmation codes, notes), the travelers, cards, point balances and certificates you add, and your settings. Traveler names and notes can be personal, so only enter what you are comfortable keeping here. Cards are stored by name and earning rules, never by number.
• Your sign-in sessions: a record of each active session, including the IP address and browser it was started from, so you stay signed in and can sign out. Recent sign-in and password attempts are also counted by IP address to slow down password guessing.
• Import history: the name, size and a fingerprint of each file you import, the columns you chose, and how many rows it created.

I never ask for, collect, or store the passwords to your airline, hotel, bank or credit card accounts. Award bookings are completed in your own accounts.

2. Spreadsheets you upload and emails you forward

When you import a spreadsheet, the file itself is not kept. Its rows are read and held so you can preview and adjust the import; they are removed when you save or discard it, and an upload you leave open expires after 24 hours and is then deleted. Only your three newest open uploads keep their rows. After saving, we keep the redemptions you chose to import and the import history above.

When you forward a booking email to Award Tracker, card numbers are removed from it before anything is stored or read. We keep the remaining text, and the booking details read from it, for 30 days so you can review them, then delete both. The subject line, the sending address and when it arrived are kept with the record of the email until you delete your account; a booking you save stays in your log. To find the booking, the text is read by Anthropic, our AI provider, acting as a sub-processor, and it is received by our inbound email provider, Resend. Neither may use it to train models. Emails you forward are deleted with your account.

3. How your information is used

I use your information to run Award Tracker for you: to show your log, balances, totals and cents-per-point figures, to send the reminders you ask for, to work on concierge requests you send, to take the fees and tips you choose to pay, and to send service updates such as password resets. I do not sell your personal information, share it with advertisers, or use it to build profiles about you.

4. Sharing of information

Your information is shared only with the services that help run the site, and only for that purpose:

• Stripe: payment processing for concierge fees and tips (I do not see or store your card number).
• AwardWallet: only if you connect it, to read your balances.
• Resend: email delivery, and receiving the booking emails you forward.
• Anthropic: reading the booking emails you forward, to find the booking (never used to train models).
• Your browser vendor's push service: only if you turn on push notifications.
• My hosting provider: Award Tracker and its database are hosted in the United States.

Your redemptions and balances are visible only to your account, apart from what you send to the concierge (below). The people who run the service can access the database for maintenance and support. The reference pages are the same for everyone; see about the data.

5. AwardWallet

You can connect an AwardWallet account to keep your balances up to date. You approve the connection on AwardWallet's own site, with read-only access to your account balances and no access to your trips. I never see or store your AwardWallet login or password.

We store the connection (AwardWallet's identifier for you, your access level, and the email address of the connected AwardWallet account so you can tell which one it is) and, for each program, the balance, expiry date and when it was last read. When you disconnect from Settings, the connection is removed and we stop reading your accounts. Balances that were synced stay as manual balances you can edit or delete; a few that cannot be kept that way (for example a program we do not recognise) are removed. You can also remove our access from your AwardWallet account at any time.

6. Payments

If you pay for a concierge request or leave a tip, payment is taken on a Stripe Checkout page hosted by Stripe. Your card number never reaches Award Tracker and is not stored here. We keep the payment's Stripe reference, the amount, its status, and the card brand and last four digits so you can see which card was used. Stripe handles your payment details under its own privacy policy.

7. The concierge

The concierge is optional. Requests are fulfilled by The Plane Prince Travel. When you send a request, the concierge team can see the request itself, the messages on it, and a snapshot of what you chose to share with it, taken at that moment: your point balances, the names of the travelers you selected, your certificates (type, name, program and expiry) and, for a cash-flight request, the name and issuer of the card you picked to pay with. The team works from that snapshot, never from the rest of your account. An option you accept is added to your redemptions log.

8. Email and push notifications

I email you for things you need, such as a password reset or sign-in verification, and for reminders you turn on in Settings: points about to expire, certificates and card renewals coming up, bonuses for a currency you hold, balance changes, a finished import, and updates on a concierge request. Reminder emails carry an unsubscribe link, and each type can be switched off in Settings. If you turn on web push, your browser's push subscription is stored so the same reminders can arrive as notifications; turning push off removes it. Emails never include your name.

9. Analytics and cookies

Award Tracker has no ads and no analytics or tracking scripts. It uses one session cookie to keep you signed in, and your browser remembers your light or dark theme choice. These are needed for the site to work as you expect; there are no advertising cookies. Some outbound links are partner links and are labelled as such; the site you land on has its own privacy policy and cookies. If any of this changes, this page will change first.

10. Data retention and security

Your information is kept while your account is open. An item you delete (a redemption, traveler, card, balance or certificate) is hidden from your account but stays in the database until you delete the account. Passwords are hashed, sign-in attempts are rate limited, and every request for your data is checked against your account. Reasonable measures are taken to protect your information, though no method of transmission over the internet is entirely secure.

11. Deleting your data

You can export your data, correct it, or delete your account from Settings after you sign in; deleting asks for your password. Deleting your account removes it and the redemptions, travelers, cards, balances, certificates, AwardWallet connection, concierge requests and messages, notification settings, push subscriptions and import history attached to it. Records of a tip are kept without any link back to you, a log of the concierge team's actions is kept without your details or messages, and Stripe keeps its own payment records under its own policy.

12. Contact

Award Tracker, in partnership with The Plane Prince Travel, New Jersey, USA. To ask about your data or request a copy, get in touch. See also the terms.