TI-2026-061L — The Price of the Discount

Classification: MEDIUM · Consumer Surveillance · Loyalty / Rewards Data Confidence: HIGH on the Target case and loyalty-analytics industry (public reporting); MEDIUM on the pricing-surcharge and resale generalisations. TLP:WHITE — public reporting, public corporate structure. Series: The Fake Umbrella — Part L. L is for "Loyalty." The one surveillance in this series you signed up for, thanked them for, and got a coupon for. Facts are facts. They are good for some and bad for others. You decide.

The seed: the store knew she was pregnant before her father did

Around 2012, journalist Charles Duhigg reported a scene that has never stopped being the cleanest illustration of this letter. A man walked into a Target near Minneapolis, furious, holding coupons the store had mailed to his teenage daughter — coupons for cribs, baby clothes, maternity wear. He demanded to know why Target was encouraging his high-schooler to get pregnant. The manager apologised. A few days later the father called back to apologise: it turned out his daughter was pregnant. Target knew before he did.

It knew because of a statistician named Andrew Pole, who had built a "pregnancy-prediction" model out of the store's loyalty and purchase data — unscented lotion, certain supplements, cotton balls, a shift in the basket — that scored shoppers on how likely and how far along a pregnancy was, and timed baby coupons to the due date. No wiretap. No hack. No spyware. Just the rewards card, and the oldest truth in retail dressed in math: what you buy is a confession, and the loyalty program is the priest who sells the transcript.

The discount is the price, and you are the thing being bought

The genius of "loyalty" is that it is the only surveillance in this entire series that the target volunteers for, consents to, and feels grateful for. You sign the form. You agree to the terms. You get points, or 2% off, or a birthday muffin. It feels like a gift.

It is not a gift. It is a purchase — and the thing being purchased is you. In exchange for a small, immediate discount, you hand over a permanent, itemised, timestamped, store-located record of everything you buy, forever. That record is worth far more to the retailer than the coupon costs, which is the entire reason the coupon exists. This is not a company being generous with its margins; it is a company acquiring a behavioural dossier at a price it has carefully set below what the dossier is worth — and dressing the acquisition cost up as your reward. You did not save money. You sold your history, at a price you mistook for kindness because it arrived as savings.

And the industry that grew on top of this is not a secret. Tesco's Clubcard, mined by dunnhumby, turned grocery loyalty data into one of the first great behavioural-analytics businesses; Kroger's 84.51° (the former dunnhumbyUSA) does the same at American scale — selling shopper insight and card-linked ad targeting built from the baskets of tens of millions of "members." The rewards program is the collection front-end of a data company. The store is the sensor; the card is the login; you are the dataset.

Why this data is worse than it looks

It is tempting to file loyalty data under "harmless" — so what if they know I buy oat milk? But purchase data is uniquely confessional, because people buy the truth about themselves even when they tell no one else:

• The pregnancy test, the prenatal vitamins, the sudden shift to unscented everything.
• The medication, the diabetic supplies, the blood-pressure monitor.
• The alcohol volume, the contraception, the at-home test, the thing bought at 2 a.m.

Target's model proves the point: from the basket alone, inference exceeds disclosure — the store learns the secret before the person has told a soul, sometimes before they have admitted it to themselves. And that dossier does not stay in the store. It flows to analytics subsidiaries, to ad networks, into the same commercial identity graphs as your location (Part D) and your device fingerprint (Part F), and it is discoverable by subpoena. The confession in your cart becomes inventory, evidence, and a targeting segment — created, from the shopper's side, for the price of a coupon they thought was a treat.

The seven questions

Who is this? Retailers and their loyalty-data arms — Target, Tesco/dunnhumby, Kroger/84.51° — plus the brokers and ad networks that ingest card-linked purchase histories.

Why did it attack? No attack — an enrolment. The surveillance is opt-in, and the opt-in is bought with a discount.

Who does it claim to be? A rewards program — a way to thank loyal customers and give them savings. Belonging, not surveillance.

Whom is it related to? The location brokers (061D) and device fingerprinters (061F) whose identity graphs the purchase data joins; and the whole consumer-consent apparatus.

Where is the money? Both ends, again: the shopper's spending and the resale of the shopper's behavioural profile. The discount is a rounding error against the value of the dossier.

What is the official anchor? A signed membership agreement and a privacy policy no one reads — consent, manufactured by a coupon.

What if it is not who it claims? It is who it claims — a rewards program. The finding is that a rewards program is the most intimate, most consented consumer-surveillance system ever built, and the reward is what it costs to make you agree.

What if…

• What if the savings are real and worth it? Sometimes they are — real money, freely chosen. The critique is not that saving is bad; it is that the exchange is mispriced and misnamed: you were sold a "reward" for a dossier worth far more, and told it was generosity so you would not negotiate.
• What if it's just anonymous marketing data? Target's coupons were addressed to a specific pregnant teenager by name. Loyalty data is card-linked and identity-resolved by design — that is its whole value. "Anonymous" is the 061F lie in a different aisle.
• What if you can just not sign up? Increasingly you pay for that. Where "loyalty prices" are the real price, the non-member is charged a surcharge — privacy repriced as a luxury, surveillance installed as the default, and "choice" quietly turned into a fine.

Steelman: the strongest defence — and why it fails

Built at full strength:

"Loyalty programs are voluntary, transparent, and mutually beneficial. Customers knowingly trade some data for real, substantial savings they value; personalization improves their experience; no one is forced to join; the data powers efficient marketing, not harm. This is a fair, consensual exchange — the opposite of covert surveillance."

Where it breaks:

• "Knowingly traded" is exactly what did not happen. No member knowingly valued their lifetime, identity-linked purchase history — including pregnancies, illnesses and addictions inferable from it — at the price of a coupon. Consent obtained by radically underpricing what is taken is consent in name only.
• "Voluntary" erodes as the surcharge grows. When declining the card costs money at the register, the choice is coerced by price. Voluntariness is a spectrum, and loyalty pricing is engineered to slide it.
• "Just marketing, not harm" collides with Target. Inferring and acting on a teenager's pregnancy from her basket is the harm — an intimate fact extracted and used without her disclosure. And the data's onward flow to brokers, ad graphs and subpoenas is harm the "fair exchange" framing never mentions.
• The one true thing: the savings are genuine, and a shopper who understands the trade and makes it anyway is exercising a real choice — this dossier defends that choice. But it is only real if the trade is named honestly: not "here is a reward for your loyalty," but "here is a small payment for a large and permanent dossier we will monetise and share." Rewrite the sign that way and see how many still sign.

Verdict: consensual, honestly-priced data-for-savings is legitimate. "Loyalty" as practiced — an identity-linked confessional dataset acquired for an underpriced coupon, monetised, resold, and enforced by a privacy surcharge — is MEDIUM, and uniquely intimate. "Loyalty" is not a mitigation. It is the warmest word in the series wrapped around the most personal ledger you will ever generate. Confidence: HIGH on the case and industry; MEDIUM on the generalisations.

Read between the lines

Every other letter borrowed a word that hides the act. This one borrows a word that flatters the victim. "Loyalty" and "membership" do not describe what the company does; they describe how they want you to feel — devoted, belonging, valued — so that the data-collection contract reads as a relationship and the tracking reads as being cared for. It is the only surveillance in the series that recruits your affection as part of the payload. You are not the surveilled; you are a member. You are not tracked; you are rewarded. And the warmth is not incidental — it is the mechanism, because a person who feels valued does not read the terms, and a person who feels rewarded does not count what they gave.

The human layer

Go back to the girl in Minneapolis. She had told no one. Maybe she had barely told herself. And a corporation, from nothing but the things she bought, assembled the single most private fact of her life, scored it, and printed it onto glossy coupons that arrived at her father's house — turning her own quiet purchases into the instrument that outed her, at the worst possible moment, to the person she was least ready to tell. Nobody hacked her. Nobody followed her. She simply shopped, with the card, like everyone is taught to, for the discount everyone is told to take. The loyalty program did exactly what it was built to do, flawlessly, and the flawless execution was the harm. Somewhere in every "member" file is a fact the member has not yet said out loud — a diagnosis, a pregnancy, a relapse, a leaving — sitting in a basket, scored, priced, and one coupon away from arriving in the mail. That is the price of the discount. It was never 2%.

Defense — name the trade, and make them price it honestly

(1) Read "loyalty" as "data-for-discount," every time. The sign should say "we will record and monetise everything you buy in exchange for this coupon" — read it that way and decide with the real terms in view. (2) Separate your confessions from your identity where you can — cash, gift cards, or simply declining the card for sensitive purchases breaks the link the whole system depends on. (3) Assume the basket is forever and shareable — anything bought on a loyalty card should be assumed logged, profiled, resold, and subpoenable; shop accordingly for anything you would not disclose. (4) For policymakers: the loyalty surcharge is the coercion lever — where the "discount" is really a penalty for privacy, honest pricing and a genuine no-tracking option at the same price turn manufactured consent back into a real choice.

Investigation metadata

Next — TI-2026-061M: M is for "Monitoring" — the managed-security and employee-"productivity" tools ("bossware") that watch the workforce keystroke by keystroke, sold as protection and efficiency.

It is the only surveillance you thanked them for. You signed the form, took the coupon, and felt looked after — and in exchange handed over the most honest record of your life there is, the one written in what you actually buy when no one is watching. The store read a teenager's pregnancy out of her shopping basket and mailed it to her father as a special offer. The discount was never the deal. You were. Facts are facts. They are good for some and bad for others. You decide.