Privacy
earnrate is software that runs on your computer. There's no account and no service behind it, so there's nothing for me to collect. Here's where your data goes, and where it doesn't.
Updated October 28, 2026.
On your computer
Your wallet is a file you control,
~/.earnrate/wallet.yaml unless you point
EARNRATE_WALLET somewhere else. earnrate reads it, and
writes to it only when you record a purchase or apply an imported
statement. Cards are named by product, like amex-gold.
earnrate never asks for card numbers, expiry dates, security codes or
bank logins.
When you import a statement, earnrate reads the file on your computer and keeps only running totals toward caps and welcome bonuses, plus one-way fingerprints of the transactions so a second import doesn't count them twice. It doesn't keep a copy of the statement.
There's no telemetry. earnrate doesn't report usage, errors or anything else back to me.
When you ask through an AI assistant
If you connect earnrate to Claude or another assistant, earnrate still runs on your computer. But the assistant's provider receives your conversation, including what earnrate tells the assistant: the cards it compared, its answer, and what's left on your caps. That's covered by the provider's privacy policy, not this one.
The optional merchant lookup
It's off by default. If you turn it on, earnrate sends the name of a
store it doesn't recognize to Anthropic's API, using your own API key,
to ask what kind of store it is. Only the name you typed is sent: no
amounts, cards or wallet. Answers are saved on your computer, in
~/.earnrate/merchant-cache.json, so the same name isn't
sent twice. Anthropic handles the request under your agreement with
them.
Downloading earnrate
When you install earnrate, npm and GitHub see the download, as they do for any package, under their own privacy policies. I can see npm's public download counts, but nothing about who downloaded it.
This website
earnrate.dev is a static page with no cookies, scripts, analytics or forms. Cloudflare hosts it and, like any host, handles your IP address and request details to serve the page and block abuse. Its dashboard shows me aggregate traffic counts, not who visited. There's no server code and no logging turned on.
Mail to hello@earnrate.dev or licensing@earnrate.dev is forwarded to my personal inbox. I use it only to reply to you, and I don't add anyone to a mailing list.
Changes
If any of this changes, for example if earnrate ever offers a hosted version, this page will say so first, with a new date.