Privacy Policy

If you sign up for our weekly digest, we store your email address. That is the only personal information you can give us on this site. Signup uses double opt-in: you enter your email, we send a confirmation link, and you are only added to the list after you click it. Nobody can subscribe an address they do not control.

Your email is stored with Resend, the service we use to send the digest. We use it for one thing: sending you the weekly email. We never sell it, rent it, share it, or use it for anything else. If nothing changed in a week, we do not even send the email.

Every digest has a one-click unsubscribe link. Unsubscribing takes effect immediately. If you want your email deleted entirely, write us at mail@thebonusstack.com and we will remove it.

We use Google Analytics to understand how people use the site: which pages get visited, where visitors come from, and what gets clicked. Google Analytics uses cookies to do this. We see aggregate numbers, not who you are. You can block analytics cookies in your browser or with Google's own opt-out browser add-on, and the site works exactly the same.

We also use Vercel, the company that hosts the site, for cookieless traffic analytics. It counts page views in aggregate, with no cookies and nothing that identifies you. These page view counts also include coarse browser and device type totals, like the click counters. Never a fingerprint.

A small tbs_acq cookie remembers which page brought you to the site so we can credit the right content. It holds no personal information and expires on its own.

When you click an "Open Account" link, we count that click so we know which bonuses people find useful. We store the count per bonus, not who clicked. No name and no email are attached. We do not store your IP address. To prevent double-counting and abuse, we keep a short scrambled code derived from it using a secret key. The code cannot be turned back into your address, and we never use it to identify you. It clears itself within minutes.

The click counters also include obclick:ua:* for coarse browser and device type counts, never a fingerprint.

The bonus matcher on the homepage works the same way. When you use it, we count anonymous totals: how often it gets used, which states and account types get picked, and which results get clicked. Plain counters per state and per bonus. Your selection is not tied to you, and nothing identifying is stored.

The Stack, our bonus tracker, stores everything you track in your own browser (localStorage). Your plans, checklists, dates, and notes never leave your device and never touch our servers. There is no account and nothing to log into. If you clear your browser data, your Stack is gone too, which is why the tracker has an export button for backups.

We count anonymous totals of how the tracker is used, like how many bonuses were added or completed on a given day, so we can improve it. Those are plain counters. No name or email, and none of your tracked data is ever attached.

After you finish a bonus, the Stack offers to let you share a datapoint with the community. That is entirely optional. If you send one, we receive only the fields shown on the form: the bank, the dates, the deposit source, and any note you type. Nothing identifying is included, and reports are reviewed before they appear in the public datapoints.

If you use the "Report an Issue" button on a bonus page or flag a data point, what you submit is held in a short review queue and emailed to us so we can fix the problem. The forms are anonymous. We only keep what you typed, not who sent it. The queue is capped in size and we clear it out daily.

To stop a flood of junk reports, we use a scrambled code made with a secret key (keyed hashing) from your connection address for rate-limiting only. It cannot be turned back into a readable address, it is never stored in plain form, and it clears itself on a timer.

The site is hosted on Vercel, which keeps standard server logs (things like request times and IP addresses) for security and operations, the same as almost every website. We do not use those logs to identify visitors.

We do not sell or share your personal information. We do not run third-party ad trackers. We do not require an account. We do not collect financial information of any kind. When you open a bank account through a link on this site, that relationship is between you and the bank. We never see your application or any of your banking details.

This site is not directed at children under 13, and we do not knowingly collect personal information from them. Bank bonuses generally require you to be 18 anyway.

If we change how we handle data, we will update this page and the date at the top. Meaningful changes to the newsletter (like a new sender) would also be mentioned in the digest itself.

Email us at mail@thebonusstack.com. We read everything. You can also read more about the site on the About page, including how we make money.