Loyalty Cards and What the Supermarket Builds About You
What you’re actually signing up for
A loyalty card feels like a discount club. Scan it, save a few dollars, done. But the card is a key that links every transaction back to a single identity, and that identity gets a profile that grows every time you shop.
Here’s the mechanism. Without a loyalty card, a supermarket’s till system sees a basket: bread, milk, ibuprofen, wine, cat food. That basket is anonymous in the sense that it’s not tied to a name unless you paid by card, and even then the payment processor and the retailer don’t automatically share data with each other for this purpose. Add a loyalty card and every basket you’ve ever scanned gets stitched to one persistent ID. Over months and years, that ID accumulates a purchase history detailed enough to infer things you never told anyone: pregnancy (folic acid, unscented lotion, a sudden stop in wine purchases), a health condition (a switch to sugar-free everything), a breakup (buying for one instead of two), or a new pet. Retailers have talked openly for over a decade about running exactly this kind of inference, because it’s useful for predicting what you’ll buy next and when.
The profile is bigger than your basket
The purchase history is the core, but loyalty programs pull in more.
Timing and location matter: which store, which till, what time of day. This maps your routine, since the branch near your office versus the one near home tells them where you probably live and work. Buying patterns that shift, like more diapers, more snack-size portions, or more beer, let algorithms guess household size and life stage without you ever filling in a form. If the loyalty program has a phone app, it can also request location permissions, letting the company log which physical stores you walk past, well beyond the purchases you actually make there. Some programs ask you to register a card number, which lets them match loyalty purchases to card-issuer data for even richer targeting, depending on what you agreed to in the sign-up terms. And retailers with large loyalty programs increasingly run their own media businesses, selling ad space and audience segments built from this data to consumer brands, usually described in the privacy policy as “data-driven marketing” or “insights partners.”
It’s a database join on a loyalty ID, done at a scale that makes it economically worthwhile. Nothing more exotic than that.
Why the data is worth building in the first place
Grocery data is valuable for three separate reasons, and they get sold as three separate products.
First, personalized marketing: the coupons and offers you get in the app or by email are chosen based on what you already buy, to nudge you toward buying more of it or trying an adjacent product.
Second, category management: consumer brands pay for aggregate insights, like which shoppers who buy oat milk also buy a particular snack brand, so they can target shelf placement and promotions. This is usually sold in aggregate, as a summary of many shoppers rather than a file with your specific name on it. The underlying profile on you carries on existing either way.
Third, retail media: large grocery chains now run ad platforms where brands pay to target loyalty-card holders with specific purchase histories, similar to how Google or Meta sell ad targeting, except the targeting signal is your actual shopping receipt instead of your browsing behavior.
What’s in the terms you clicked past
The specifics vary by retailer and by country’s privacy law, so read the actual privacy policy for the program you use rather than trusting a summary, including this one. But the pattern worth watching for is consistent:
- Whether data is shared with “partners” or “affiliates,” and how broadly those terms are defined.
- Whether the retailer combines loyalty data with data purchased from data brokers to enrich your profile further.
- How long purchase history is retained, since some programs keep it indefinitely.
- What “opt out” actually removes. Often it stops personalized marketing emails but doesn’t stop the underlying data collection or its use for internal analytics.
This is where “read the privacy policy” earns its cliché reputation, because most people don’t and the policies are written to be technically complete rather than readable. That’s a real friction point, not a personal failing.
What reduces exposure, without pretending you can erase it
There’s no version of a loyalty card that gives you the discount and zero profile. The whole mechanism depends on linking purchases to an identity. So the honest options are about degree, not elimination.
Use a separate card for a separate identity, if the program allows anonymous signup. Some loyalty programs let you register with minimal or fake demographic details (they usually don’t verify age, address, or name against ID). This breaks the link between your loyalty profile and your real-world identity for marketing purposes, though it doesn’t break the link between purchases and each other, since the retailer still has one continuous history tied to that card.
Pay in cash for anything you don’t want in the pattern. If you don’t scan the loyalty card for a specific purchase, that transaction doesn’t join the profile at all (though the till might still log it in aggregate sales data, just not tied to your ID).
Separate the loyalty card from card payment linking. If the program asks you to link a bank card number for “extra rewards,” declining that keeps payment-processor level data separate from purchase-history data, so a breach or data share on one side doesn’t automatically expose the other.
Check for a data access or deletion request option. Depending on the jurisdiction, many retailers are required to let you request a copy of what they hold or ask for deletion. This won’t be instant and won’t necessarily remove data already shared with third parties before the request, but it’s a real lever where the law supports it. This isn’t legal advice on what rights apply where you live, just a description of a mechanism that exists in some places.
Decide what tradeoff is actually worth it to you. For a lot of people, a 10% discount on groceries is worth having a marketing profile. That’s a legitimate choice, not a mistake. Understanding the mechanism is what turns the tradeoff into one you’re choosing on purpose instead of one you never noticed you made. Scaring you off loyalty cards was never the point.
Where this fits with everything else you do online
Loyalty card data usually stays in its own lane; a supermarket profile doesn’t automatically merge with your browsing history or your email inbox unless the company explicitly buys or sells into a broader data marketplace, which some retail media businesses do. If you’re already thinking about reducing your digital footprint with things like tracker blocking or a VPN for your browsing traffic, know that those tools do nothing for a physical loyalty card scanned at a till. The threat model is different: one is about who sees your network traffic, the other is about who owns the receipt history tied to your name. No single tool covers both, and no combination of tools gets you to zero, but understanding which lever affects which profile is what lets you spend your effort where it actually matters to you.
If you want more breakdowns like this on how ordinary conveniences quietly build profiles on you, and what specifically does and doesn’t reduce that, visit The Privacy Wire for more explainers.