Card Advisor — Privacy Policy

Last updated: 2026-07-22

Card Advisor is a Chrome extension that recommends which of your credit cards earns the most rewards for a purchase, based on the page you're checking out on. This page explains exactly what data the extension reads, stores, and sends, and what it never does.

What the extension reads

The extension's content script looks at the current page's URL and visible page content (form fields, button text) to detect whether you're on a checkout or payment page. This check happens locally, in your browser, on every page you visit. Page content is never transmitted anywhere — it's used only to decide, on-device, whether to show a card recommendation.

What the extension stores

The list of credit cards you've added in Settings (card name, issuer, and public reward-rate data for that card product — not your card number, expiration date, CVV, or any account/payment information) is stored only via Chrome's built-in chrome.storage.sync (synced across your own signed-in Chrome browsers via your Google account) — never on a server we run. Dismissing the recommendation banner with the × button only closes it for that page view; it isn't remembered, so the banner will show again on your next visit.

The one exception is the "Report this page" button, described below — that's the only thing Card Advisor stores server-side.

What the extension sends over the network

Card Advisor makes network calls to its own backend (card-advisor-proxy.pointout-extension.workers.dev) in two cases, both initiated by something you explicitly do:

Searching for a card by name in Settings, or refreshing a card's reward-rate data — sends the search text you typed or a generic card product ID.
Clicking "Report this page" when Card Advisor didn't show a recommendation you expected — sends the URL of that one page to a database we use to review and improve checkout detection over time. This only happens when you click the button; nothing is ever reported automatically, and only the URL and a timestamp are recorded — no other page content, browsing history, or personal information.

Neither of these sends your page content, browsing history, or any payment information. The backend proxy exists to keep third-party API keys and database credentials out of the extension itself; it does not log requests beyond what's described above.

What the extension does not do

No ads, no analytics, no third-party trackers.
No selling or sharing of data with anyone.
No user accounts — nothing you do in the extension is tied to an identity Card Advisor controls.

Contact

Questions about this policy: mahanmostafavi1@gmail.com