Skip to content
Menu
Schemes
TravelEmirates SkywardsflydubaiEtihad GuestAir Arabia AirRewardsQatar Privilege ClubSaudia AlFursanflyadealflynas nasmilesGulf Air FalconflyerOman Air SindbadJazeera AirwaysSalamAirAvios from Dubai
GuidesProgramme verdictsPoints conversionsWhat points are worthExpiry rulesSkywards vs Etihad GuestSkywards vs Qatar Privilege Club
ToolsWhich programmes quizPoints value calculatorENTERTAINER calculator
Supermarkets & retailSHAREBlue RewardsShukranTickitAuraAmber
Fuel & transportADNOC RewardsENOC YESnol Plus
Deals appsThe ENTERTAINERIs it worth it?Smiles
Get scheme alerts

Independent guides to points, miles and rewards.

Privacy

Privacy notice

Version 2026-10-31. How an email or WhatsApp signup, wallet balances you choose to save, and analytics cookies are handled.

Who we are

The controller is Strand Global FZE-LLC, incorporated in the United Arab Emirates. RewardsSorted is the name of this site. For a privacy request, use the contact page and mark the message “privacy”.

What we collect if you sign up

Email address. Mobile number, only if you also tick WhatsApp. Which schemes and categories you pick. The page and market you used. The time. The consent wording version (alerts-2026-10-31). A salted hash of your IP address, not the address itself. An unsubscribe token and a deletion token, stored as hashes.

The email box says: “Email me when a scheme I follow changes, and send the occasional guide. I expect a few emails a month at most, not a daily message. I can stop this with one click.”

The WhatsApp box says: “Also send those scheme changes on WhatsApp to the mobile number above. Messages will be occasional, not daily. I can opt out at any time. My network may charge for receiving them.”

Neither box is ticked for you. You can read the site without signing up.

My wallet

Balances you type stay in this browser until you choose “Save and get alerts”. That step uses the same consent boxes. If a database is connected, we then store the scheme, the points and any expiry date you typed, with the signup. We do not ask for a loyalty login or password, and we do not sign in to a scheme. Deleting the signup deletes those balances.

Why, and the lawful basis

We use the details to send the alerts you asked for: email about scheme changes and the occasional guide, and WhatsApp only if you ticked that box. The lawful basis we intend to rely on is consent (UK GDPR Article 6(1)(a), and PECR for electronic mail and similar messages). Consent is separate for each channel. We do not use the soft opt-in.

We email a confirmation link when you sign up. The signup stays pending, and scheme alerts start only after you confirm that email. WhatsApp numbers and consent are stored only. This site does not send WhatsApp messages.

International transfers

The controller is in the UAE. The database, if connected, is Supabase, whose region is not fixed in this notice. The UAE is not an adequate country for UK GDPR. A transfer to the controller, or to a host outside the UK, needs an approved mechanism such as the International Data Transfer Agreement or addendum.

How long we keep it

Unconfirmed sign-ups are deleted after 30 days. A confirmed subscription is kept until you unsubscribe or ask for deletion. After you unsubscribe, the record stays so we can show that consent was withdrawn, until you ask for deletion or for two years, whichever comes first. The deletion link removes the email, phone, consent text and interests.

Your rights

You can ask for access, correction, deletion, restriction, or a copy, and you can withdraw consent. Withdrawal does not affect a message already sent. The one-click unsubscribe link stops email and WhatsApp for that signup. The deletion link removes the record. You can complain to the Information Commissioner’s Office (ico.org.uk). Use the contact page and mark the message “privacy”.

Analytics

If you accept analytics cookies, Google Analytics 4 receives page addresses without the query string, and events for a newsletter signup (the channel only: email or WhatsApp), a calculator result (the scheme and whether the result was a single figure or a range), a wallet line being added (the scheme name), and an affiliate click (the scheme name). It does not receive your email address, phone number, points balance or expiry date. The Google tag is not loaded before you accept. Advertising storage stays denied. IP anonymisation is requested, and Google signals are off.

The lawful basis is consent (PECR, and UK GDPR Article 6(1)(a)). You can reject, or withdraw later, from Cookie settings. Google Ireland Limited and Google LLC are the recipients. A transfer to the United States needs a transfer tool.

Other processing

Affiliate redirects, when a destination exists, log the partner, placement and time on our side. They do not store an IP address. See the cookies page.