My credit card issuer apparently never gets to know what I purchased at stores, cafes, & restaurants – and rightfully so. The statement just shows the shop name, location, and amount.

Exceptionally, if I purchase airfare the bank statement reveals disclosures:

  • airline who sold the ticket
  • carrier
  • passenger name
  • ticket number
  • city pairs

So that’s a disturbing over-share. In some cases the airline is a European flag carrier, so IIUC the GDPR applies, correct? Doesn’t this violate the data minimization principle?

Airlines no longer accept cash, which is also quite disturbing (and illegal in jurisdictions where legal tender must be accepted when presented for PoS transactions).

Has anyone switched to using a travel agent just to be able to pay cash for airfare?

UPDATE

A relatively convincing theory has been suggested in this other cross-posted community:

https://links.hackliberty.org/comment/414338

Apparently it’s because credit cards offer travel insurance & airlines have incentive to have another insurer involved. Would be useful if this were documented somewhere in a less refutable form.

    • soloActivist@links.hackliberty.orgOP
      link
      fedilink
      arrow-up
      1
      ·
      edit-2
      5 months ago

      privacy.com omits some critical details so it’s unclear if that would actually work.

      The virtual cards are designed so the merchant does not get your permanent card №. But nothing is said on that site about how the money flows. If the virtual card is linked to a conventional card, then the transaction info from the merchant could get passed through to the bank anyway.

      (edit) Registrants must agree to ACH linking. That’s probably a good thing… it somewhat suggests they do an ACH pull from your bank to pay for the transaction, in which case your bank only sees X amount being drafted, not what it is for.

      I insist on cash to buy alcohol & junk food, because who’s to say the banks don’t sell that info to data brokers who sell it to insurance companies? Perhaps this is a way to use a card for purchases that could work against you. Although we still have to trust privacy.com, which I’m a little skeptical about because they have a gratis plan. Maybe the merchant fee compensates privacy.com well enough… but it would be nice to know if that’s the case.