Privacy Policy | ccpoints

Who we are

ccpoints (https://ccpoints.com.au) provides credit card comparison information and optional paid access to premium features through Points Pass.

For privacy enquiries, use the contact form on our Refundspage (for refund and account issues) or the process described in the “Your choices” section below.

Information we collect

Depending on how you use the site, we may collect:

Account information: email address and authentication credentials managed through Supabase Auth (passwords are stored in hashed form; we do not see your plain-text password).
Points Pass status: which pass type you hold (7-day or All-Access) and, for 7-day passes, when access expires. This is stored in our database and linked to your user account.
Payment-related information: Stripe processes payments on our behalf. We receive confirmation that a payment succeeded and identifiers needed to grant access (such as a Stripe customer or session ID). We do not receive or store your full card number.
Site preferences: filter and browsing preferences you save in your browser (for example, card list filters stored in local storage).
Security data: when you submit certain forms or sign in, Cloudflare Turnstile may process technical signals to help prevent abuse. Supabase Auth may also use Turnstile when captcha is enabled for authentication.
Technical and usage data: standard server and hosting logs (such as IP address, browser type, and pages visited) may be collected by our hosting provider to operate and secure the service.

How we use information

We use personal information to:

create and manage your account;
provide free and Points Pass features you request;
process payments and grant or verify access after purchase;
respond to support and refund requests;
maintain security, prevent fraud and abuse, and debug issues;
improve the site and understand aggregate usage patterns.

We do not sell your personal information. We do not use your data to provide personalised financial advice.

Third-party services

We use trusted providers to run ccpoints. They process data on our instructions and under their own privacy terms:

Supabase: authentication and database hosting.
Stripe: payment processing for Points Pass purchases.
Vercel: website hosting and performance measurement (Speed Insights).
Cloudflare Turnstile: bot and abuse protection on selected forms and authentication flows.

When you pay for Points Pass, Stripe's privacy policy also applies to payment data they collect directly from you.

Cookies and local storage

We use essential cookies and similar technologies to keep you signed in and to remember preferences you choose (such as card filters). These are necessary for core site functionality. We do not use third-party advertising cookies on ccpoints.com.au.

Retention

We keep account and Points Pass records while your account exists and as needed to meet legal, tax, and dispute-resolution obligations. Payment records retained by Stripe are governed by Stripe's policies. You may request account deletion; some records may be kept where we are required or permitted by law.

Your choices

You may update your email from your account page (subject to email confirmation). You may request access to, correction of, or deletion of personal information we hold by contacting us through the form on our Refunds page and describing your request.

If you are in Australia, you may also complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have handled personal information contrary to applicable privacy law.

Overseas disclosure

Our service providers may store or process data outside Australia (for example, in the United States or the European Union). Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place consistent with applicable law.

Children

ccpoints is intended for adults comparing credit card products. You must be at least 18 years old (or the age of majority in your state or territory) to create an account or purchase Points Pass.

Changes

We may update this policy from time to time. The “Last updated” date at the top of this page shows when it was last revised. Material changes will be posted on this page.