1. The short version
We do not run a loan application funnel. We do not ask you for your SSN, your birthdate, your bank credentials, or your income. We are a comparison site. The three things we collect are (a) basic analytics when you browse, (b) whatever you send us through the contact form, and (c) referral logs when you click an outbound partner link. Detail below.
2. Information we collect
Analytics and server logs
When you visit the Site, our servers automatically log standard web-server information: your IP address, user-agent, the pages you viewed, the referring URL, and timestamps. We may also use a privacy-respecting analytics tool that records aggregated pageview, device, and country information. We do not use this data to build an advertising profile of you.
Contact form submissions
If you send us a message through the contact form, we receive what you type: your name (optional), your email address (if you choose to provide one), the subject and body of the message. We store submissions in a file on our server so we can read and respond to them.
Referral logs
When you click a sponsored or affiliate link on this Site, our server may log the click (timestamp and destination partner). The partner may also set a cookie in its own domain to track that you arrived from us; that cookie is controlled by them, not us.
What we do NOT collect
- We do not collect your Social Security number.
- We do not collect your bank login or banking credentials.
- We do not collect your date of birth or full home address.
- We do not run a credit check.
- We do not sell your information to loan partners. We never have.
3. How we use it
- Operate the Site - keep pages loading, fix bugs, detect abuse.
- Respond to you - if you email us, we reply.
- Editorial research - understand which guides are useful and which are not, so we can improve our content.
- Fraud and security - prevent automated scraping, abuse, and attacks on the Site.
4. How we share it
We share information with:
- Our infrastructure providers - the hosting provider, the analytics provider, the email service if we reply to you. These are service providers acting on our behalf.
- Law enforcement - only when required by a valid legal process (subpoena, court order) or where we have a good-faith belief it is necessary to protect rights, safety, or property.
We do not sell personal information. We do not share personal information with data brokers. We do not share contact-form submissions with loan partners.
5. How long we keep it
- Server logs: up to 90 days, then deleted or anonymized.
- Contact-form submissions: up to 12 months after the conversation ends, unless we need to keep them longer for legal reasons.
- Aggregated analytics: retained for as long as it is useful for editorial research.
6. Your rights
If you are a resident of California (CCPA/CPRA), Colorado (CPA), Virginia (VCDPA), Connecticut (CTDPA), Utah (UCPA), or another state with a consumer-privacy law, you have rights that generally include:
- The right to know what personal information we have about you.
- The right to request deletion of your personal information.
- The right to correct inaccurate personal information.
- The right to opt out of the “sale” or “sharing” of personal information (we already do not sell).
- The right to non-discrimination for exercising these rights.
To exercise any of these rights, contact us via the contact form and include “Privacy request” in the subject line.
7. Cookies and analytics
We use a small number of first-party cookies for essential site operation (e.g., remembering your filter preferences on the comparison page). We may use a privacy-respecting analytics tool that does not track you across other sites. Third-party partners you click through to will set their own cookies in their own domain, under their own privacy policies.
You can configure your browser to block or delete cookies. Doing so will not break the Site.
8. Children
This Site is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has submitted information through the Site, contact us and we will delete it.
9. Security
We use reasonable technical and administrative safeguards to protect the information we hold. No system is perfectly secure. If you believe you have discovered a security issue on the Site, tell us through the contact form with “Security” in the subject line.
10. Changes to this policy
We may update this policy from time to time. Material changes will be noted at the top of the page for at least 30 days after the change.
11. Contact
Questions about this policy? Use the contact form.