Privacy Policy

Points Butler Chrome Extension · Last updated: June 2, 2026

Hotel points have a quiet way of disappearing. You earn them on business trips, family holidays, the occasional upgrade. Then one day you check your account and they're gone. Expired. Points you could have redeemed for a free night, or donated to a cause you care about, simply lost because life got busy and the expiry date crept past unnoticed.

I built Points Butler to fix that. First for myself, then for anyone else who's been there. It does one thing: makes sure you always know where your points stand. The developer, pointsbutler@gmail.com

Short version: Points Butler reads your points balance from hotel websites you're already logged into. That data stays on your device. The only thing that ever leaves your device is feedback you voluntarily choose to submit.

What Points Butler does

Points Butler is a Chrome extension that tracks your hotel loyalty points balances across programs including Marriott Bonvoy, IHG One Rewards, Hilton Honors, Accor Live Limitless, and ITC Hotels Rewards. It displays all your balances in one place, alerts you before points expire, and reminds you when accounts go inactive, so you never lose points you've earned.

It is a personal utility tool. It does not aggregate data across users, does not build profiles, and does not transmit your information to any third party for commercial purposes.

Data stored on your device

The following is stored locally using Chrome's built-in storage and is never transmitted to any server:

Points balances, expiry dates, and membership numbers read from hotel loyalty pages you visit while logged in
Sync timestamps (when each program was last updated)
Your program preferences (which loyalty programs you chose to track)
A randomly generated anonymous token used only for rate-limiting backend requests (it contains no personal information)

You can permanently delete all of this at any time using the Clear data button in the extension popup.

Data sent externally: feedback only

The only data that ever leaves your device is feedback you choose to type and submit via the in-app feedback form. This is sent to a private spreadsheet accessible only to the developer. Submitting feedback is entirely optional and nothing is submitted without your explicit action.

AI-assisted extraction: what it is and when it runs

Points Butler reads your loyalty page using CSS selectors (specific patterns that match the points display on each page). For confirmed programs, this works silently on your device with no external calls whatsoever.

In cases where automatic CSS detection fails, the visible text of the loyalty account page (the same text you can already read on screen) may be sent to our backend server and processed using the Anthropic Claude API for AI-assisted extraction.

Important clarifications:

No passwords or credentials are ever sent. Only the visible text on the page.
This is a fallback, not the default. For all programs supported in this version, CSS selectors work reliably and the AI path is not triggered in normal use.
Anthropic does not train its models on API data. Data sent via the Claude API is governed by Anthropic's privacy policy and is not used for model training.

Notifications

Points Butler sends local Chrome notifications when your points are approaching expiry (at 180, 90, 60, 30, 7, and 2 days before expiry) and when an account hasn't been synced in 90+ days. These notifications are generated entirely on your device. No data is sent to any external server to produce them.

What we never collect

Passwords, login credentials, or authentication tokens of any kind
Credit card or payment information
Browsing history or activity outside hotel loyalty websites
Your name, email address, or any personally identifying information

Third-party services

Anthropic Claude API: used for AI-assisted points extraction as a fallback only. Receives visible page text, not credentials. Governed by Anthropic's privacy policy.
Google Sheets via Apps Script: receives voluntary feedback submissions. Accessible only to the developer.
Google Favicon API: used to display hotel brand logos. Receives only the domain name of each hotel program.

Security

All points data is stored locally within your Chrome profile, which is protected by your device's own security. Data sent to our backend server is transmitted over HTTPS. We do not operate databases storing your personal information.

Children's privacy

Points Butler is not directed at children under the age of 13 and we do not knowingly collect any information from children. If you believe a child has submitted information through the extension, please contact us at pointsbutler@gmail.com and we will remove it promptly.

Changes to this policy

If we make material changes to this privacy policy, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the extension after changes constitutes acceptance of the updated policy.

Contact

Questions or requests regarding this policy: pointsbutler@gmail.com