The short version: CardRank has no user accounts, no email capture, and no server-side storage of your quiz answers. There's almost nothing to have a policy about. But regulations require one anyway, so here it is.
Like most websites, CardRank uses Google Analytics 4 to understand how visitors find and use the site. GA4 collects:
quiz_complete, which records (a) the slug of your top-ranked card, (b) your selected primary goal, and (c) your annual fee tolerance. This event does not contain your individual quiz answers beyond those three fields. It is used solely to understand which cards the quiz tends to recommend most often.GA4 data is retained for 14 months and then automatically deleted. You can opt out of Google Analytics tracking across all sites using the Google Analytics Opt-out Browser Add-on, or by using any browser extension that blocks analytics trackers (uBlock Origin, Privacy Badger, etc.).
When you click an "Apply" button on CardRank, you are redirected to either the issuer's application page directly, or to a tracked affiliate link operated by Bankrate, CardRatings, FlexOffers, CJ Affiliate, or Impact. These networks may set cookies to attribute any resulting application back to CardRank.
CardRank does not receive any personally identifiable information from these networks — only aggregate counts of clicks and approved applications. If you want to learn more about how these networks handle data, each publishes its own privacy policy:
CardRank sets the following cookies:
We do not set advertising cookies. We do not use retargeting pixels. We do not integrate with any social media tracking beyond the share metadata embedded in the page's HTML.
Because we do not collect or store personally identifiable information server-side, most of the standard data-subject rights (access, deletion, correction, portability) have nothing to act on. If you would like us to attempt to delete any information we might have — or if you simply want to confirm that there's nothing to delete — email smigelski.andy@gmail.com with the subject "Data request" and we will respond within 30 days.
For the data collected by Google Analytics, please use Google's own My Activity controls or the opt-out add-on linked above.
CardRank is not directed at children under 13 and we do not knowingly collect any information from children. Most credit cards legally require applicants to be at least 18 years old.
If we materially change how we collect or handle information, we will update the "last updated" date at the bottom of this page and, for significant changes, post a notice on the homepage for at least 30 days.
Privacy-related inquiries go to smigelski.andy@gmail.com with "Privacy" in the subject line. Operated by Scout Theory LLC.
Last updated: April 2026.