Unofficial Platinum Experience

Privacy notice

Last updated 25 October 2026

This site is run by Koo Haoming, an individual in Singapore. It is an unofficial fan site and is not affiliated with American Express. This page covers the map, the Table for Two email alerts and the Telegram bot. Questions go to [email protected].

What we collect

If you only browse the map

No account, no cookies and no location. Your browser keeps three settings in local storage: theme-preference, amex-benefits-intro-v3 and amex-benefits-updates-read-v1. They record your theme, whether you saw the intro and the updates you have read. They stay on your device.

If you sign up for email alerts

Your email and, if you give it, your name. Your alert choices: party size, venues, sessions and dates. We also keep a scrambled (hashed) copy of your IP address to stop repeat sign-ups. It is wiped when you confirm.

If you use the Telegram bot

Your Telegram ID is only stored in hashed form. If you confirm a reminder, we store your chat ID so the bot can message you, plus the venue, meal and dates you picked. We do not store the text of your messages.

Why

To show you the map, to email or message you when a matching Table for Two slot appears, and to stop abuse. We do not use your details for marketing and we do not sell them.

Who sees it

• Railway hosts the alerts service and its database.
• Resend sends the emails.
• GitHub hosts the site and runs the job that sends alerts.
• Cloudflare sits in front of the site. Cloudflare Web Analytics: cookieless, aggregate page views, no input capture.
• Telegram carries bot messages.
• Loading the map also fetches files from unpkg.com (map code), tile.openstreetmap.de (map tiles) and DiningCity (some venue photos). They see your IP address, as any website you load does.

Most of these companies are outside Singapore, so your data is stored overseas.

How long

• Unconfirmed sign-ups: until the confirmation link expires.
• Unsubscribed emails: 30 days.
• Alerts whose dates have passed: 30 days after the last date.
• Telegram chat IDs: until the reminder is sent, cancelled or out of date.
• Finished Telegram reminders: 30 days.
• Anti-abuse records: 24 hours.

To avoid sending an alert twice, the alert job keeps a hashed record of each alert sent. It contains no readable email address and is kept in the project's public GitHub repository.

Your choices

• Every email has links to change your alerts or unsubscribe. No login needed.
• In Telegram, send /delete_me then DELETE to erase everything the bot holds about you.
• Email [email protected] to see, correct or delete your data, or to withdraw consent. Write from the address you signed up with.

Contact

[email protected]. If this page changes, the date at the top changes too.