Privacy Policy

Last updated: September 19, 2026. Effective for visitors and subscribers in the United States.

This Privacy Policy explains what personal information Kredua (operated by RR Digital, CNPJ , Rua Balbino Bento da Silva, 02, União dos Palmares/AL, 57800-000, Brazil; “Kredua”, “we”, “us”) collects when you visit this website, sign up for one of our quizzes or email lists, or contact us; how we use and share it; and the choices and rights you have, including the rights granted by the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, “CCPA”). It also serves as our notice at collection under the CCPA.

1. Scope and who we are

This policy applies to the United States pages of Kredua located under /usa/, in English or in Spanish, and to posts whose address begins with “usa-“, to the quizzes reachable from those pages, and to the emails we send to subscribers who signed up there. It does not apply to the websites of the banks, lenders and other companies we link to; each of them has its own privacy policy, and the application you complete on their site is governed by it.

Kredua is an information and comparison website. We are not a financial institution, we do not take credit applications and we never ask for your Social Security Number, account numbers, passwords or card details. If a page or message claiming to be from Kredua asks for any of these, it is not ours.

2. Categories of personal information we collect

In the twelve months preceding the date above, we have collected the following categories of personal information, as those categories are defined in the CCPA:

  • Identifiers: name and email address (when you fill in a quiz or subscription form), phone number (only in forms that ask for it, and only if you choose to provide it), IP address, an anonymous visitor ID stored in a cookie, and online identifiers assigned by advertising platforms (for example the Meta browser ID, when you arrive from a Meta ad).
  • Internet or other electronic network activity: pages viewed, links and buttons clicked, quiz answers, referring website, campaign parameters in the address (utm_source, utm_campaign and similar), date and time of visits, browser type, device type and screen size.
  • Geolocation data: approximate location (country, state and city) derived from your IP address. We do not collect precise GPS location.
  • Commercial information: which product pages you visited and which official-site buttons you clicked; whether you opened or clicked an email we sent.
  • Inferences: the type of product that may interest you (for example “credit card for fair credit”), based on the quiz answers and pages visited.

We do not collect sensitive personal information as defined by the CCPA (such as Social Security Numbers, financial account credentials, precise geolocation, racial or ethnic origin, health data or biometric data), and we do not knowingly collect personal information from anyone under 16.

3. Sources of the information

  • Directly from you, when you answer a quiz, subscribe to an email list or write to us.
  • Automatically from your device, through cookies, pixels and our own first-party analytics script, when you browse the site or open our emails.
  • From advertising platforms (Google and Meta), in the form of click identifiers appended to the address when you arrive from an ad.

4. How we use personal information

We use the categories above for the following business and commercial purposes:

  • To show you the quiz result and the product page that matches your answers.
  • To send you the emails you subscribed to, with product suggestions and guides, and to measure whether they were opened or clicked. You can stop them at any time with the unsubscribe link in every message.
  • To operate, secure and improve the website: measuring which pages are read, detecting errors and abuse, and understanding which content is useful.
  • To display advertising, including ads tailored to your interests, and to measure the performance of our own advertising campaigns (for example, recording that a sign-up came from a specific ad).
  • To answer your messages and requests, including privacy requests.
  • To comply with legal obligations and to establish, exercise or defend legal claims.

We do not use personal information to make credit decisions about you, because we do not make credit decisions at all.

5. How we share personal information, and what counts as a “sale” or “sharing”

We disclose personal information to the following categories of third parties and service providers:

  • Advertising partners: Google (Google Ad Manager / AdSense, Google Ads and Google Analytics through Google Tag Manager) and Meta (Meta Pixel and Conversions API), which receive identifiers and network activity data to display and measure ads. When you sign up through a quiz, we may send Meta a hashed (irreversible) version of your email address, together with the event identifier, so that the sign-up can be matched to the ad you clicked.
  • Email delivery provider: MailerSend, which stores the email address, name and subscription details needed to send our messages.
  • Hosting and infrastructure: OVHcloud (servers) and Cloudflare (content delivery, DNS and security), which process technical data such as IP addresses to deliver the site.
  • Marketing automation: Nyder Pulse, the platform we use to manage subscriber lists and email sequences.
  • Authorities and advisers, when required by law, subpoena or court order, or to protect our rights and the safety of users.

Under the CCPA, making identifiers and internet activity available to advertising platforms for cross-context behavioral advertising is treated as “sharing”, and may be treated as a “sale” even though no money changes hands for the data itself. In the twelve months preceding the date above we have shared the categories identifiers, internet or other electronic network activity, geolocation data (approximate) and commercial information with Google and Meta for that purpose. We have not sold personal information for money, and we do not sell or share the personal information of consumers we know to be under 16.

The referral links on our product pages take you to the issuer’s website. The issuer knows that you came from Kredua; we do not send them your name, email or quiz answers.

6. Your right to opt out of sale or sharing (“Do Not Sell or Share My Personal Information”)

You can direct us to stop sharing your personal information with advertising platforms in any of these ways:

  • Turn on the Global Privacy Control (GPC) signal in your browser or a browser extension. We treat a GPC signal as a valid opt-out request for that browser, and advertising tags are not loaded while it is on.
  • Email [email protected] with the subject line “Do Not Sell or Share”. You do not need to create an account or verify your identity for this request; we only need enough information to apply it (for example, the email address you subscribed with).
  • Use the cookie settings of your browser to block third-party cookies, and the opt-out tools offered by the platforms themselves: Google Ads Settings (adssettings.google.com), Meta Ad Preferences, and the industry pages youradchoices.com and optout.networkadvertising.org.

Opting out does not stop advertising; it stops the use of your personal information to tailor it. It also does not affect the emails you subscribed to, which you can stop separately with the unsubscribe link.

7. Your other rights under the CCPA

If you are a California resident (and, in general, any visitor who asks), you have the right to:

  • Know what personal information we have collected about you, the categories of sources, the purposes, the categories of third parties we disclosed it to, and the specific pieces of information we hold.
  • Delete the personal information we collected from you, subject to the exceptions allowed by law (for example, records we must keep to complete a request you made or to comply with a legal obligation).
  • Correct inaccurate personal information.
  • Opt out of the sale or sharing of your personal information (section 6).
  • Limit the use of sensitive personal information. We do not collect it, so this right does not currently apply.
  • Not be discriminated against for exercising any of these rights. We will not deny you content, charge a different price or provide a different level of service because you made a privacy request.

Residents of other states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and others) have similar rights to access, delete, correct and opt out of targeted advertising, and may appeal a decision we make on their request. We apply the same process to everyone who writes to us.

8. How to exercise your rights

Send your request to [email protected] (subject: “Privacy request”) or write to RR Digital, Rua Balbino Bento da Silva, 02, União dos Palmares/AL, 57800-000, Brazil. Tell us which right you are exercising and the email address you used on our site, so that we can find your records.

  • Verification: for requests to know, delete or correct, we verify that the request comes from the person the data belongs to, usually by sending a confirmation link to the email address on file. We will ask for additional information only if the match is unclear.
  • Authorized agents: you may designate someone to submit a request for you. We will ask for proof of the authorization (a signed permission) and may still confirm the request with you directly.
  • Timing: we confirm receipt within 10 business days and respond within 45 days. If we need more time (up to 45 additional days), we will tell you why. There is no fee for making a request, unless requests are manifestly excessive, in which case we may charge a reasonable fee or decline, and we will explain the reason.
  • Appeals: if we deny a request, you may reply to our decision to ask for a review by a different member of the team.

9. Cookies and tracking technologies

We use a small first-party set of cookies and scripts (a consent cookie, an anonymous visitor ID, a session ID and the campaign parameters of the visit) and third-party tags from Google and Meta. Advertising tags are loaded only after you accept the cookie banner and are not loaded when your browser sends a Global Privacy Control signal. Our Cookie Policy lists each cookie, its purpose and how long it lasts, and explains how to change your choice.

10. Email communications

When you subscribe through a quiz or form, we send you a series of emails about the products that match your answers and, later, occasional guides. Every email includes a working unsubscribe link and a one-click unsubscribe header; requests are processed within 24 hours, in compliance with the CAN-SPAM Act. We never sell subscriber lists.

11. How long we keep personal information

  • Subscriber records (name, email, quiz answers, campaign data): while you remain subscribed and for up to 12 months after you unsubscribe, so that we can honor the opt-out and answer questions about it; then deleted or anonymized.
  • Website analytics and ad-measurement events: up to 26 months in aggregated form; raw event logs with IP addresses for up to 90 days.
  • Messages you send us: up to 3 years, in case a follow-up is needed.
  • Privacy request records: 24 months, as the CCPA requires us to keep a log of requests and responses.

12. Security

The site is served over HTTPS, personal data is stored on access-controlled servers, email addresses sent to advertising platforms are hashed before transmission, and access to subscriber data is limited to the people who operate the lists. No method of transmission or storage is completely secure; if a breach affecting your personal information occurs, we will notify you and the competent authorities as required by law.

13. Where your information is processed

Kredua is operated from Brazil and its servers are located in Canada (OVHcloud) with content delivery by Cloudflare’s global network; email is delivered by MailerSend. Your personal information may therefore be processed outside the United States. We apply the same protections described in this policy wherever the data is processed.

14. Children

Kredua is intended for adults. We do not knowingly collect personal information from children under 13 (Children’s Online Privacy Protection Act) and do not sell or share the personal information of consumers under 16. If you believe a minor has provided us with personal information, contact us and we will delete it.

15. Disclosure summary for the preceding 12 months

The table below summarizes, for each category of personal information, whether it was collected, disclosed to service providers for a business purpose, and sold or shared for cross-context behavioral advertising in the twelve months before the date of this policy.

  • Identifiers — collected: yes · disclosed to service providers: yes (MailerSend, Nyder Pulse, OVHcloud, Cloudflare) · sold/shared: shared with Google and Meta (advertising).
  • Internet or network activity — collected: yes · disclosed to service providers: yes (hosting, analytics) · sold/shared: shared with Google and Meta (advertising and measurement).
  • Geolocation (approximate) — collected: yes · disclosed: yes (hosting, analytics) · sold/shared: shared with Google and Meta.
  • Commercial information — collected: yes · disclosed: yes (email provider, analytics) · sold/shared: shared with Google and Meta.
  • Inferences — collected: yes · disclosed: yes (email platform, to select which emails you receive) · sold/shared: no.
  • Sensitive personal information, biometric, professional, education, or protected-class information — not collected.

16. Changes to this policy

We review this policy at least once every 12 months and whenever our practices change. The date at the top shows the latest revision. If a change materially affects how we use information you already gave us, we will notify subscribers by email before it takes effect.

17. Contact

Privacy requests and questions: [email protected]. General contact: [email protected]. Postal address: RR Digital, Rua Balbino Bento da Silva, 02, União dos Palmares/AL, 57800-000, Brazil. You can also use the contact page.

Last updated: 19/09/2026