Question for any PCI experts out there:
Airport ticket kiosks can use your credit card to find your reservation at checkin time. So clearly PCI must allow use of credit card numbers to identify customers. I assume the airline is storing an irreversible hash of my credit card number with my reservation, and when I visit the checkin kiosk they hash my card again and use the hashed value to look up my reservation.
But when I go to a supermarket or drugstore and want to get discounts from their loyalty program, I need to swipe a special card that the store gave me (or enter in my phone number).
Using my credit card to identify me would be easier for me and for the merchant, so I'm surprised that retail merchants don't seem to offer this capability. This led me to wonder whether there's a PCI or legal restriction at work here.
Is there a PCI or legal restriction which prevents stores from using my credit card number to identify me for loyalty-program purposes, but which does not prevent airlines from doing the same thing at checkin kiosks?