What this site collects, what it does not, and how to change your mind.
There are no accounts here and nothing to buy. We do not know who you are. A small number of things collect anything at all: an analytics tool that counts page views, an affiliate tool that lets a hotel site know a booking came from here, the feedback box, which keeps whatever you choose to type into it, the Edit updates list, which keeps the email address you give it, and a cookieless speed measurement built into our host. In the UK and the EU none of the first two run until you agree, and you can change your mind at any time using .
Unspent Credits is an independent site, run by a private individual rather than a company, and is not affiliated with JPMorgan Chase & Co. or any hotel brand. For anything in this notice — including a request to see, correct or delete what we hold about you — write to privacy@unspentcredits.com. We will identify the operator to you on request.
We use Google Analytics 4 to count page views and see which pages and filters people find useful. It records the pages you view, roughly where you are (derived from your IP address by Google, not stored by us), your device and browser, and which site you arrived from. We do not use it to build advertising profiles and we have no advertising features enabled. It sets cookies in your browser.
Some links to hotel booking sites are affiliate links, handled by Stay22. When you click one, Stay22 and the booking site record that the click came from here so that any resulting booking can be credited to us and a commission paid. That involves cookies and identifiers set by those companies, and their own privacy notices govern what they do with them.
The “Around your stay” links — airport transfers, rental cars, things to do and eSIMs, from Welcome Pickups, Kiwitaxi, DiscoverCars, Viator, Klook, Tiqets and Yesim — are affiliate links handled by Travelpayouts in the same way: the click passes through Travelpayouts, which records it so a purchase can be credited to us. On our city and country pages, and only where your privacy choices allow affiliate tools, we also show some of these partners’ own widgets (tour cards from Viator, Klook or Tiqets, and DiscoverCars’ rental-car search), loaded from Travelpayouts (tpwdg.com); they can set the partner’s cookies like a click on one of the links. Otherwise no script of theirs runs on this site.
If you send feedback, we keep the message you wrote, the email address you chose to give (optional, and only used to reply), the page you were on, the two-letter country your request came from, your browser’s user-agent string and the time you sent it. It is stored on Cloudflare and emailed to the site owner. Nothing else about you is attached to it.
If you sign up for Edit updates, we keep your email address, the time you signed up, the page you were on, the two-letter country your request came from, and the wording you agreed to. That list is stored on Cloudflare, and the emails are sent through Kit (kit.com), our email provider, which keeps a copy of your address to send them and records whether they are opened. We send only what you signed up for — hotels joining or leaving The Edit, changes to the credit rules, and reminders before your credits expire, about once a month — and never sell or share the list. Every email has an unsubscribe link, or write to the address above to be removed from both copies.
Map tiles on the interactive map are served by OpenStreetMap. Loading them means your browser requests images from openstreetmap.org, which necessarily sees your IP address. The map cannot draw without them, and they set no cookies here.
The site runs on Cloudflare, which processes requests and keeps short-lived operational logs to serve pages and block abuse. This happens for every visitor and is necessary for the site to function at all.
Cloudflare also measures how quickly pages load for real visitors, using a small script it adds at its edge rather than one we install. It records the page, how long it took to render, and general details like browser and country. It sets no cookies, stores nothing on your device, does not identify you and is not used to follow you to other sites — so unlike analytics and affiliate links, it is not something we ask you to agree to. We use it to keep the site fast.
| What | Set by | Purpose | Needs consent |
|---|---|---|---|
| uc:privacy | This site | Remembers your cookie choice. Stored in your browser only; never sent anywhere. | No — strictly necessary |
| _ga, _ga_* | Google Analytics | Counts visits and distinguishes one browser from another. | Yes |
| Stay22 identifiers | Stay22 and the booking site | Credits a booking to this site so a commission can be paid. | Yes |
| Travelpayouts identifiers | Travelpayouts and the partner (transfer, tours or eSIM) | Credits a purchase to this site so a commission can be paid; set only when you click an “Around your stay” link, or by a partner widget on a city or country page where your choices allow it. | Yes |
Where consent is required, nothing in the last two rows loads until you press Accept. Pressing Reject means they are never loaded; the site works exactly the same either way.
Use at any time to accept or withdraw. Withdrawing stops analytics and affiliate tools loading from then on, and deletes the analytics cookies already on your device.
We honour Global Privacy Control. If your browser or an extension sends that signal, we treat it as a refusal, load nothing that needs agreement, and do not ask you again — you have already answered. You can still turn things on for this site with the control above if you want to, and that choice will be respected over the signal.
You can also block or delete cookies in your browser, and Google offers a browser add-on that opts you out of Google Analytics everywhere.
Our legal basis for analytics and affiliate cookies is your consent, which you give and withdraw with the control above. For the feedback box it is our legitimate interest in reading and answering what you chose to send us, and where you supplied an email address, replying to you. For Edit updates it is your consent, which you withdraw by unsubscribing. For server logs it is our legitimate interest in keeping the site available and secure.
You have the right to ask what we hold about you, to have it corrected or deleted, to object to or restrict how it is used, to receive it in a portable form, and to withdraw consent at any time without affecting what was lawful beforehand. Write to the address above. You also have the right to complain to your national data protection authority — in the UK, the Information Commissioner’s Office.
Our providers — Google, Stay22, Travelpayouts, Cloudflare and Kit — are based in or transfer data to the United States, and rely on the transfer mechanisms described in their own privacy notices.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. The categories we handle are the identifiers and internet-activity information described above, kept for the purposes described above. Residents of California and other states with similar laws can ask what we hold, ask us to delete it, and opt out of analytics and affiliate cookies — the same control does the opt-out, and the address above handles the rest. We will not treat you differently for exercising any of these rights.
Analytics data is retained by Google under the retention setting on our property. Feedback is kept until it has been dealt with and is deleted on request. An Edit updates address is kept until you unsubscribe or ask us to delete it. Cloudflare’s operational logs are short-lived. Your cookie choice stays in your browser until you clear it or change it.
This site is about a credit card benefit and is not directed at children. We do not knowingly collect anything from anyone under 16.
Prices shown across this site are sampled two-night estimates collected to give a directional sense of cost. They are not live quotes, not guaranteed, and not what you will necessarily be charged — always confirm the real rate in the Chase Travel portal before booking. Nothing on this site is financial, tax, legal or travel advice.
If this notice changes, the date below changes with it.