Skip to content
HopPerks

Privacy Policy

Effective 2026-06-07 · Last updated

This policy explains what HopPerks (“HopPerks”, “we”) collects when you use https://hopperks.com, and your choices. This is a plain-language summary — have it reviewed by a qualified lawyer before relying on it legally.

What we collect

If you use the site without an account

  • Nothing personal, beyond analytics. Tools like the quiz, wallet, and trip planner run in your browser and store data only in localStorage on your device. The figures you enter are not sent to our servers.
  • Usage analytics. We use Google Analytics to understand aggregate traffic — pages viewed, approximate region, device type, referrer. Used in aggregate to improve the site, not to identify you individually.
  • Standard server logs. Our hosting provider logs IP addresses and request metadata for security and reliability.

If you create an account

Creating an account is entirely optional. If you do, we collect and store:

  • Name — provided at sign-up.
  • Email address — used to authenticate you and send transactional emails (email confirmation, password reset). We do not send marketing email.
  • Password — stored as a one-way hash (bcrypt via Supabase Auth). We never see or store your plaintext password.
  • Date of birth — optional. Collected to support future renewal reminders tied to card anniversary dates. Not used for any other purpose.
  • Saved card wallet— the credit/charge card IDs you choose to save to your account. These are product identifiers only (e.g. “amex-platinum”); we do not collect card numbers, CVVs, account balances, or any financial data.

Account data is stored in a Supabase-managed PostgreSQL database. Row-level security policies ensure your data is only accessible to you. We do not share account data with third parties except as described below (hosting infrastructure, compliance).

Cookies & your consent

Google Analytics may set cookies or similar identifiers to measure traffic. We use a consent banner with Google Consent Mode: in the EEA, UK and Switzerland analytics cookies stay off until you accept; elsewhere they default on but you can reject at any time. Change your choice via “Cookie preferences” in the footer. The site works fully without analytics cookies. Supabase Auth uses an HTTP-only cookie to maintain your login session; this is strictly necessary and not subject to analytics consent.

Affiliate links

Some outbound “Apply” links are affiliate links. If you follow one, the issuer or affiliate network may set its own cookie to attribute a resulting application to us. That activity is governed by their privacy policies, not ours. See our Affiliate Disclosure.

What we don't do

  • We don't sell your data.
  • We don't build advertising profiles about you.
  • We don't collect card numbers, account balances, or financial credentials.
  • We don't send marketing emails.
  • We don't share your account data with card issuers or affiliate networks.

Do we sell or share your data?

No — we don't sell your personal information, and we don't use it to build advertising profiles. Under California's CPRA, allowing analytics/affiliate partners to set cookies can count as “sharing” for cross-context advertising; you can opt out at any time using “Cookie preferences” in the footer (we also honour the Global Privacy Control browser signal where required).

Data retention

  • Accounts: your account and all associated data is retained until you delete it. You can delete your account at any time from your profile page — deletion is permanent and immediate.
  • Analytics: governed by Google Analytics's retention settings (typically 14 months).
  • Server logs: retained by our hosting provider per their standard policy.

Your privacy rights

Depending on where you live you may have the following rights:

  • EEA / UK (GDPR): access, correction, erasure, restriction, portability, objection, and the right to withdraw consent or complain to your data-protection authority.
  • California (CCPA/CPRA): the right to know, delete, and correct personal information, to opt out of sale/sharing, and not to be discriminated against for exercising these rights.

Account holders: you can delete your account and all associated data directly from your profile page. For analytics data or any other request, email hello@hopperks.com.

Changes

We may update this policy; material changes will be reflected by the effective date above.

Contact

Questions? Email hello@hopperks.com.