Privacy Policy

Point Fares LLC (“Pointfares,” “we,” or “us”) operates pointfares.com and provides personal award-flight research and booking guidance. This policy explains what information we collect, how we use it, and the choices you have. For privacy questions or requests, email booking@pointfares.com.

Information we collect

Information you give us. When you request a search, we collect your name, email address, and the trip details you submit: airports, travel dates and flexibility, number of travelers, cabin and stop preferences, overnight layover preference, points programs and approximate balances, and airline miles. We also keep the information you send in follow-up emails and the Flight Plan correspondence needed to provide the service. Please do not send passwords, verification codes, full card numbers, account numbers, or passport images.

Payment information. Stripe hosts our payment pages for the $25 start fee and any Flight Plan fee. We may receive your email address, payment status, amount, transaction reference, and information needed to handle a refund or payment question. A payment link may contain your email address and a short Pointfares request reference so we can match the payment to your search. After you pay, Stripe may send you back to our confirmation page with a payment code in the page address. The page removes the code from the address, and our server uses it only to ask Stripe whether that payment went through. Pointfares does not receive your full card number.

Website and technical information. When you visit the site, our hosting provider may process your IP address, browser and device information, pages requested, and security logs. If you arrive through an ad or tagged link, we keep limited campaign tags in your browser tab and include them with your inquiry if you submit the form. Those tags can then be associated with your name and email. If you’re in the US and arrive from a Meta ad, we also keep the click code Meta added to that link in your browser tab, unless you decline optional cookies, so our messages to Meta (below) can name the ad you came from. To decide which cookie rule applies, our hosting provider tells the page whether your connection appears to come from the US; nothing is stored for that. Your unfinished form answers stay in the open page; we do not save the trip draft in browser storage. We store your cookie choice in browser local storage. A saved choice expires after 180 days; the record may remain in browser storage until replaced or cleared.

Fonts. Our pages load Google Fonts. Your browser contacts Google to obtain the fonts and may send technical request information, such as your IP address and browser information, even if you decline optional analytics.

How we use information

We use information to respond to your request, research flights against your criteria, prepare and discuss a Flight Plan, provide booking guidance, send service emails, match payments to requests, process refunds, protect the site from abuse, and keep records needed for business and legal purposes. Submitting the trip form does not add you to a marketing email list.

We also use analytics and advertising measurement to understand visits, completed inquiries and payments, and to improve the site and our ads: in the US unless you decline it, and elsewhere only if you accept it. Our analytics events in your browser do not include names, email addresses, trip descriptions, points balances, or request references.

What our server tells Meta

If you’re in the US, our server tells Meta when you send a trip request and go on to the $25 checkout, when you pay a start fee or Flight Plan fee, and when you open our sample Flight Plan, so we can see which of our ads bring requests and paying clients. Each message carries a random event code, the page address without its tags, your IP address and browser type, the Meta Pixel’s cookies if it has set them, and, if you came from a Meta ad, the click code Meta added to that link. Messages about a request or a payment also carry your email address in scrambled form (a SHA-256 hash of the email you gave us or Stripe), which Meta uses to match the message to a Meta account, and a code made from your request reference with a secret key, which can’t be turned back into the reference. A payment message adds the amount paid before tax, the currency, and whether it was the start fee or a Flight Plan fee. These messages never include your name, your email as you typed it, trip details, points, card details or your request reference, and they set no cookies. We don’t send them if you decline optional cookies or your browser sends a Global Privacy Control signal.

Cookies, analytics, and tracking choices

In the US, Google Analytics, the Meta Pixel, and Microsoft Clarity load when you open the site unless you choose Decline optional in our cookie banner or your browser sends a Global Privacy Control signal. Elsewhere, they load only if you choose Accept optional. They may receive online identifiers, your IP address, browser and device details, page views, and information about how you use the site. Clarity can record clicks, scrolling, and session activity; form input fields and the on-page trip summary and request reference are masked. Google and Meta may use information under their own policies, including across sites or services. Read Google’s privacy policy, Meta’s privacy policy, and Microsoft’s privacy statement.

You can decline optional measurement and still request a search. Declining also stops the messages to Meta described above and removes the Meta click code kept in your tab. Use Cookie preferences in the site footer to change your choice. If you withdraw a prior choice, we tell the loaded providers to stop using optional cookies and clear first-party measurement cookies we can access. Already loaded providers may continue limited processing without cookies until you leave or reload the page. On your next page load, optional tags stay unloaded unless you accept again. We cannot recall information already sent to a provider. We honor a browser’s Global Privacy Control signal by keeping optional measurement off. We do not separately act on the older Do Not Track browser signal. Other companies may collect information across sites when their tools run on Pointfares.

Who receives information

We use Vercel to host the site; Resend to deliver your inquiry to us and send your confirmation email; our email provider to store and send correspondence; and Stripe to process payments and tell us whether a payment went through. Google receives font requests. Google, Meta, and Microsoft receive the website information described above when optional measurement is on: in the US unless you decline it, elsewhere only if you accept it. Meta also receives the server messages described above unless you decline optional cookies or your browser sends a Global Privacy Control signal. We may use research and drafting tools, including AI-assisted tools, to help prepare Flight Plans; those tools may process the trip details needed for that work. We may disclose information when required by law or necessary to protect our rights and users. We do not sell your trip brief, points balances, email address, or payment information.

How long we keep information

We keep inquiries, client correspondence, and payment records for as long as needed to respond, provide the service, handle refunds or disputes, and meet business or legal obligations. A saved cookie choice expires after 180 days, although its browser record may remain until replaced or cleared. Campaign tags and the Meta click code kept in your browser tab are lost when that tab’s session ends, although tags submitted with an inquiry become part of its record. An unfinished trip form is lost when the page closes or reloads. Hosting and other service providers may keep their own operational records under their policies.

Your choices and requests

Email booking@pointfares.com to ask what information we have about you, request a correction or deletion, or raise a privacy concern. We may need to verify your identity. We will respond in accordance with applicable law and may need to retain information for legal, accounting, security, or dispute purposes. You can also control optional measurement at any time through Cookie preferences.

Security and children

We take reasonable steps to protect the information we handle, but no internet service can guarantee complete security. Please do not send passwords, verification codes, full card numbers, account numbers, or passport images. Our service is intended for adults and is not directed to children under 13. If you believe a child has provided us personal information, contact us so we can review and remove it as appropriate.

Visitors outside the United States

Pointfares is based in the United States. If you use our site from elsewhere, your information may be processed in the United States and other locations where our service providers operate.

Changes to this policy

We will post changes on this page and update the date at the top. If a change requires additional notice or a new choice under applicable law, we will provide it.