We do not sell personal information
We have never sold personal information, for money or otherwise, and we have no plans to. There is very little to sell: the site has no accounts, no login, no newsletter and no forms, and we do not ask for your name, address, income or credit score. The privacy policy lists what little we record, which is a count of outbound clicks with no IP address, no user agent and no identifier attached.
But third-party advertising can count as “sharing”
This is the part a boilerplate page would leave out, so we will be direct about it. Under the California Consumer Privacy Act as amended by the CPRA, “sharing” has a specific meaning: disclosing personal information to a third party for cross-context behavioural advertising, whether or not any money changes hands. This site carries third-party display advertising, and when an ad vendor sets or reads a cookie on these pages and uses it to personalise advertising based on your activity across other sites, that can constitute sharing under that definition — even though we receive no payment for the data and never see it.
So we are not going to tell you nothing leaves this site. The accurate statement is: we sell nothing, we disclose nothing to anyone ourselves, and the advertising on these pages may nonetheless involve sharing as California defines it. The way to stop that is to opt out at the vendor, and the routes are below.
How to opt out
- Global Privacy Control. The most effective route. If your browser or an extension sends a GPC signal, vendors that honour it must treat it as a valid opt-out of sale and sharing under California law. It applies automatically on every site, including this one, with nothing to click. See globalprivacycontrol.org.
- Google. Turn off ad personalisation in Google Ads Settings.
- Industry opt-outs. aboutads.info and networkadvertising.org cover many vendors at once; youronlinechoices.eu is the European equivalent.
- Your browser. Blocking third-party cookies prevents most of this at source. The cookie policy explains what each category does.
We cannot make the opt-out for you, because we hold no identifier that would let us recognise your browser and act on your behalf. That is a consequence of not tracking you, and on balance we think it is the right trade.
Categories, for the California disclosure
Personal information that may be involved in advertising on these pages: internet or network activity (pages viewed on this site), approximate location inferred from IP address by the vendor, and unique online identifiers in vendor cookies. We do not collect, and have never collected, your name, postal address, email address other than one you choose to send us, government identifiers, financial account information, credit score, employment or health information. We do not knowingly collect personal information from anyone under 16, and we do not sell or share the personal information of minors. Cloudflare processes IP addresses as our service provider for security and delivery, which is not a sale or a share.
Other US state privacy laws
Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA) and the states that have followed them give broadly similar rights: to know what is held about you, to get a copy of it, to have it corrected or deleted, and to opt out of targeted advertising. Several of those states also require that a universal opt-out signal such as GPC be honoured. Everything above applies equally to residents of those states: the opt-out routes are the same, and the answer to a request for a copy or deletion is normally that we hold nothing tied to you.
Exercising a right
Email privacy@creditcardb.com and say what you want: to know, to access, to correct, to delete, or to opt out. We will respond within 45 days, as the statutes require. In almost every case the honest answer will be that we hold no personal information about you at all, and we would rather tell you that than invent a records search. We will not treat you differently for making a request — there is nothing to withhold, since the site has no accounts, no pricing and no premium tier. An authorised agent may act for you; we may ask for evidence of that authorisation.
If we ever begin selling personal information, this page will say so before it happens.