Your Privacy

01

What we collect

When you use the card-finder tool, you enter monthly spending amounts by category. This data is used only to calculate your card ranking and is not linked to your identity unless you choose to save your results.

If you save your results or create an account, we collect your email address and the spending amounts you entered. We do not ask for your name, address, Social Security number, or financial account numbers anywhere on the site.

The statement analyzer is engineered so statement contents cannot reach our servers: your pasted or uploaded statement is parsed in your browser, which extracts only date, merchant, and amount, masks anything resembling an account number, and computes every ranking locally on your device. The only data transmitted is a short list of merchant names our built-in merchant list doesn't recognize, sent through our server to Anthropic Claude for categorization — with no amounts, dates, or account details attached. We do not store or log those names. Anthropic processes them under its commercial API terms: it does not train models on them, and may retain API inputs for a limited period (generally up to 30 days) under its standard retention policy before deletion.

02

How we use it

We do not sell your personal information. Ever.

03

Cookies & analytics

We use Google Analytics 4 to understand how visitors use the site — page views, traffic sources, device types, and events like “calculator result viewed.” It runs only after you accept cookies on the consent banner; decline and no analytics loads at all. Google Analytics sets cookies and assigns your browser a random identifier so repeat visits count as one visitor; we look at this data only in aggregate and never combine it with your email or account. Google processes it under its own privacy policy. We don’t use Google’s advertising features or share analytics data with ad networks. Withdraw consent any time via Cookie Settings in the footer, or use the Google Analytics opt-out add-on.

04

When you click Apply on issuer site

“Apply on issuer site” links take you to the card issuer's website. Once you leave RollsRewards, this privacy policy no longer applies. The issuer's own privacy policy governs what they collect during the application process.

05

How we store your data

Spending data and account information is stored securely via Supabase — a hosted database service with encryption at rest and in transit. Data is stored in the United States. We retain your data as long as your account is active, or until you request deletion.

06

Your rights

If you have an account, you can delete it yourself — along with your saved spending history, newsletter subscription, and reviews — from your dashboard. No email required, effective immediately.

You may also request access to, correction of, or deletion of any personal data we hold about you — including California residents under CCPA and EU residents under GDPR. Email us at hello@rollsrewards.com and we will respond within 30 days.

07

Do Not Sell My Info

RollsRewards does not sell, rent, or share your personal information with third parties for monetary or other valuable consideration — to any party, ever. This includes California residents under the CCPA/CPRA and residents of other U.S. states with similar privacy laws. Because we do not sell your data, there is no opt-out needed, but you may still request access, correction, or deletion of anything we hold by emailing hello@rollsrewards.com.

08

Policy changes

If we make significant changes, we'll update the date at the top of this page and note what changed. Minor clarifications are made without notice.