Privacy Policy

Overview

Cardocrat ("Cardocrat," "we," "us," or "our") operates the website at cardocrat.com (the "Site"). This Privacy Policy explains what information we collect, how and why we use it, who we share it with, and the choices and rights you have. By using the Site, you agree to the practices described in this policy.

Cardocrat is an independent credit card comparison and education platform. We are not a bank, lender, or card issuer. We do not process applications, and we never ask for your card numbers, card PINs, online banking credentials, Social Security number, or other sensitive financial login details. The tools on the Site are designed to work with nothing more than the names of the card products you are interested in.

Information we collect

We collect only what we need to provide and improve the Site. This falls into a few categories:

Account information. Creating an account is optional. If you create one with email and password, we collect your email address. If you choose to sign in with Google, we receive your name, email address, and profile picture from your Google account. We never receive or store your Google password.

Wallet and tracker data you enter. When you use the Wallet or Personal Tracker, we store the choices you make: the cards you add to your wallet, saved card setups, tracker items such as statement-credit checkboxes, annual-fee renewal dates you enter, welcome-bonus progress, and points balances you record. This is a list of card products and your own notes. It is never your card numbers, balances with the bank, or banking logins.

Information stored on your device. Most of this data is saved in your browser's local storage so the Site works instantly and without an account. If you create an account, the same data is synced to our cloud backend so it is available when you sign in on another device.

Usage and device information. Like most websites, we may automatically collect standard technical information such as your browser type, device type, general region, pages viewed, links clicked, and the site that referred you. We collect this through analytics tools (for example, Google Analytics provided through Firebase) to understand aggregate usage and improve performance and content.

Communications. If you email us or opt in to updates, we keep your message and contact details so we can respond and, where you have asked, send you occasional news.

How we use your information

• To provide the Site and its features, including saving and syncing your wallet and tracker across your devices.
• To create, secure, and maintain your account and keep you signed in.
• To understand how the Site is used and to improve our content, tools, accuracy, and performance.
• To send optional product updates or rewards news, but only if you have opted in. You can unsubscribe at any time.
• To respond to your questions and provide customer support.
• To detect, prevent, and address security incidents, fraud, abuse, or technical problems, and to comply with our legal obligations.

Where the law requires a legal basis for processing (for example, under the GDPR), we rely on your consent, the performance of our service to you, and our legitimate interests in operating and improving the Site.

Google Sign-In and Google user data

If you choose to sign in with Google, we request only basic profile information and your email address in order to create and identify your account. Cardocrat's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not share it with third parties except as needed to provide the Site or as required by law.

Cookies and tracking technologies

We use cookies and similar technologies such as local storage to keep you signed in, remember your theme and preferences, and measure aggregate usage. Some are necessary for the Site to function; others, such as analytics, help us understand and improve how the Site is used. You can clear or block cookies and local storage through your browser settings, although some features may stop working if you do. We honor browser-level privacy signals where required by applicable law.

How we share information

We do not sell your personal information. We share information only in these limited circumstances:

• Service providers. We use Google Firebase to provide authentication, database storage, and analytics. Your account and synced wallet and tracker data are stored with Google Firebase on our behalf, protected by security rules that limit each account to its own data.
• Affiliate partners. The Site contains affiliate links. When you click one, you leave our Site and visit a partner's website, where their own privacy policy applies. We may receive compensation if you are approved for or use a product, but we do not share your personal account data with these partners.
• Legal and safety reasons. We may disclose information if required by law or legal process, or to protect the rights, property, safety, and security of Cardocrat, our users, or the public.
• Business transfers. If Cardocrat is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

Data retention and deletion

We keep your account and synced data for as long as your account is active or as needed to provide the Site. You can clear your saved data from within the Site at any time, and you can request deletion of your account and all associated data by emailing us at the address below. We will delete it within a reasonable period, except where we are required to retain certain records by law.

Security

We use reasonable technical and organizational measures to protect your information, including access controls that restrict each account to its own data and encrypted connections (HTTPS) for data in transit. No method of transmission or storage is completely secure, however, so while we work hard to protect your information, we cannot guarantee absolute security.

Your privacy rights

You can review and update your saved data at any time, opt out of optional emails using the unsubscribe link in any message, and request access to or deletion of your personal information by contacting us. Depending on where you live, you may have additional rights under laws such as the EU and UK GDPR or the California Consumer Privacy Act (CCPA), including the rights to access, correct, delete, port, or restrict the use of your personal information, and the right not to be discriminated against for exercising those rights. We honor these requests as required by applicable law. To make a request, email us at the address in the Contact section.

Children's privacy

The Site is intended for adults and is not directed to children under 18. Credit card products generally require applicants to be at least 18. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we will delete it.

International users

Cardocrat is operated in the United States. If you access the Site from outside the United States, your information may be processed and stored in the United States or other countries where our service providers operate, where data protection laws may differ from those in your country.

Third-party links

The Site links to third-party websites and services, including card issuers, shopping portals, and rewards programs. We do not control and are not responsible for the content, products, or privacy practices of those third parties. We encourage you to review the privacy policy of any site you visit.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or the law. When we do, we will revise the "Last updated" date at the top of this page, and significant changes may be communicated through the Site. Your continued use of the Site after an update takes effect means you accept the revised policy.