Privacy Policy

The short version

We run a rewards platform, not a data business. We do not sell personal information. Accounts are optional, and most features that remember things (your comparison list, your card selections, comments and ratings) store that data in your own browser, not on our servers. If you choose to link a financial account, that data is collected only with your consent, used only to power features you see, encrypted at rest, and deleted when you unlink.

Information we collect

• Server logs. Like nearly every website, our hosting provider (Vercel) records standard request logs: IP address, browser type, pages requested, and timestamps. We use these for security and performance.
• Browser storage.Features like Compare, My Cards, comments and star ratings save data in your browser's localStorage on your device. This data never leaves your browser and you can clear it at any time in your browser settings.
• Account data. If you create an account, we store your email address and profile details (username, preferences, points) on our servers so they sync across devices. Sign-in uses one-time email codes; we never store a password.
• Information you submit. Anything you post publicly (comments, forum posts, display name) will be stored and displayed publicly. Do not post information you want private.

Linked financial accounts (Plaid)

If you choose to connect a bank or card account, the connection is made through Plaid, a regulated financial data network used by thousands of financial apps. Your bank credentials go directly to your bank through Plaid; we never see or store them. With your consent, we receive from Plaid: account names and types, balances, credit limits, transactions, and credit card details such as APRs and payment due dates.

• How we use it. Only to power the features you see: best-card recommendations, spending insights, fee and due-date tracking, and signup bonus progress. We do not sell, license, or share this data with third parties beyond what is required to operate these features.
• How we protect it. Financial data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Plaid access tokens are additionally encrypted at the application layer and are never readable from a browser.
• How to disconnect. Unlink an account or delete your Credit Compound account at any time. Unlinking revokes our access at Plaid immediately, and we delete the stored financial data within 30 days. You can also manage connections in the Plaid Portal.

Cookies and analytics

We do not currently run third-party advertising trackers. If we add privacy-respecting analytics or advertising partners in the future, this policy will be updated first and the effective date above will change.

Outbound links

When you click View Offer or Open buttons, you leave our site for a bank, card issuer or partner website. Their privacy practices are their own; read their policies. Some outbound links may be affiliate links as described in our advertiser disclosure. We do not pass your personal information to issuers; an application you complete on an issuer's site is between you and the issuer.

Your rights

Depending on where you live (including California under CCPA/CPRA and the EU/UK under GDPR), you may have rights to access, correct or delete personal information. For browser-stored data, clear your browser storage. For account and linked financial data, delete your account in the app or email us; deletion completes within 30 days. Ask us about anything else at the address below.

Children

This site is about credit products and is not directed at children under 13. We do not knowingly collect information from children.

Contact

Privacy questions: team@creditcompound.com or via the contact page.