Privacy Policy & Cookie Policy

Effective Date: December 2025
Last Updated: December 2025

This Privacy Policy & Cookie Policy explains how Ratesautority(“Ratesautority,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you visit ratesautority.com(the “Site”).

Important context about the Site (please read):
Ratesautority is a financial product comparison and informational website. The Site may publish reviews, comparisons, rate tables, calculators, guides, and educational content about financial products (for example, credit cards, loans, insurance, banking products, and related offers). The Site may also include affiliate links and tracking mechanisms so we can earn commissions when you click to third-party providers or complete a transaction with them.

The Site does not provide user accounts, shopping carts, direct purchases, or payment processing. Any application, purchase, signup, or transaction occurs on third-party websites, not on Ratesautority.

By using the Site, you acknowledge you have read and understood this Privacy Policy & Cookie Policy.

1. Scope and Role of This Policy

This Policy applies to information collected through:

The Site and its pages, content, and embedded tools
Newsletter signup forms (if offered)
Analytics and measurement tools (including cookies and similar technologies)
Affiliate tracking links and referral technologies
Social media widgets or embedded media (when present)

This Policy does not cover:

Third-party websites you visit after leaving our Site (including advertisers, affiliate partners, lenders, insurers, or comparison marketplaces)
The privacy practices of those third parties (they have their own policies and terms)

Practical example:If you click “Apply Now” and complete an application on a bank's website, the bank's privacy policy—not ours—governs that application.

2. Information We Collect

We aim to collect the minimum information needed to operate and improve the Site. The information we collect falls into the following categories:

2.1 Information You Provide Voluntarily

Depending on the features available on the Site, you may provide:

Newsletter subscription data (such as email address and, if requested, name)
Message content you submit through any on-site fields (for example, feedback boxes, surveys, or comment fields if enabled)
Preference data (for example, cookie preference selections or language choices)

Practical example: If you enter your email to receive weekly rate alerts, we collect the email address you submit and record the time/date of signup.

2.2 Information Collected Automatically (Usage & Device Data)

When you visit the Site, we may automatically collect:

IP address (which may indicate approximate location)
Device identifiers (e.g., browser type, OS, device model)
Log data (e.g., pages viewed, time on page, referring page, links clicked)
Approximate geolocation (derived from IP; not precise GPS)
Performance and diagnostic data (e.g., errors, load times)

This data is typically collected via cookies, server logs, pixels, SDKs, and similar technologies.

Practical example: If many users abandon a comparison table on a certain page, we may use aggregated analytics to improve the layout.

2.3 Cookies and Similar Technologies (Detailed in Section 8)

We (and our partners) may use:

Cookies (first-party and third-party)
Local storage/session storage
Pixels/tags/web beacons
Link tracking parameters (e.g., UTM tags or affiliate IDs)
Device fingerprinting-like signals (limited by browser controls and legal requirements)

3. How We Use Information

We use collected information for purposes consistent with operating an informational comparison website, including:

3.1 Operating and Securing the Site

Displaying content properly
Maintaining security and preventing fraud/abuse
Debugging and error monitoring
Protecting the Site, users, and our business from malicious activity

3.2 Analytics and Site Improvement

Understanding how visitors use pages and tools
Measuring content performance (e.g., which comparisons are most helpful)
Improving navigation, readability, and user experience
Testing design changes (A/B tests where allowed)

3.3 Affiliate Link Functionality and Attribution

Tracking that a visitor came from our Site to a partner website
Measuring conversions and performance (often via an affiliate network or tracking platform)
Preventing affiliate fraud (e.g., duplicate or automated clicks)

Important: Affiliate tracking typically uses cookies or link identifiers so third parties can confirm the referral.

3.4 Newsletter and Communications (If Enabled)

If you opt in, we may:

Send newsletters, educational content, and product updates
Share curated comparisons and updates to rates/terms
Send promotional content that may include affiliate links

You can unsubscribe using the unsubscribe mechanism included in those messages.

3.5 Legal, Compliance, and Enforcement

Complying with law, regulation, or legal process
Enforcing our policies
Establishing, exercising, or defending legal claims

4. Legal Bases for Processing (GDPR / EEA / UK Visitors)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, we process personal data under these legal bases:

4.1 Consent

We rely on consent where required, including for:

Non-essential cookies (e.g., marketing/affiliate cookies in many jurisdictions)
Newsletter signups
Certain targeted measurement technologies (depending on region)

Practical example: If cookie consent is presented, marketing/affiliate cookies may not be set until you accept them (where legally required).

4.2 Legitimate Interests

We may process data for legitimate interests, such as:

Operating and securing the Site
Measuring content performance and improving usability
Preventing abuse and ensuring network security
Basic audience measurement (where permissible)

We balance these interests against your rights and expectations.

4.3 Contractual Necessity

If you request a specific feature (e.g., a newsletter you ask to receive), processing may be necessary to provide it.

4.4 Legal Obligation

We may process data to meet legal obligations, such as responding to lawful requests from authorities.

5. How We Share Information

We do not sell personal information in the traditional sense of exchanging it for money. However, certain data-sharing via cookies/trackers may be considered a “sale” or “sharing” under some laws (see Section 11 for California rights).

We may share information with:

5.1 Service Providers (Processors)

Vendors who help us operate the Site, such as:

Hosting and infrastructure providers
Analytics providers
Security and fraud prevention vendors
Email/newsletter distribution platforms (if enabled)

These providers are authorized to process data only to perform services for us under contractual protections.

5.2 Affiliate Partners, Networks, and Advertisers

If you click an affiliate link, certain identifiers (such as a click ID, referral URL, or cookie values) may be processed by:

Affiliate networks
Partner brands (e.g., banks, lenders, insurers, fintech providers)
Attribution and measurement platforms

Practical example:You click “See Rates” and are redirected to a partner page; a tracking ID may be used so the partner can confirm the referral.

5.3 Legal and Safety Disclosures

We may disclose data when we believe in good faith that disclosure is necessary to:

Comply with law or legal process
Protect rights, safety, and security
Prevent fraud or respond to security incidents

5.4 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to standard protections.

6. Third-Party Websites and Embedded Content

The Site may link to, embed, or integrate third-party content (e.g., calculators, widgets, videos, or application portals). When you interact with these third-party features:

The third party may collect data directly from you
Their policies govern your interaction

Practical example: A comparison widget embedded from a third party may log usage and set its own cookies.

7. Email Marketing Practices (If Newsletter Is Offered)

If the Site offers email subscriptions:

7.1 Opt-In

You subscribe by providing your email and confirming consent (where required).
We may use double opt-in in some regions or circumstances.

7.2 Content and Frequency

Emails may include:

Educational content (e.g., “How APR works”)
Product comparisons and market updates
Promotional content including affiliate links

Frequency may vary based on editorial calendar and market changes.

7.3 Unsubscribe

Each message will include an unsubscribe method. Unsubscribing may take effect promptly, though limited operational messages may still be sent if required (e.g., confirming your unsubscribe request, where permitted).

7.4 CAN-SPAM Compliance

Where applicable, we follow CAN-SPAM principles, including:

Clear identification of messages
A functioning opt-out mechanism
Processing opt-out requests within a reasonable timeframe

8. Cookie Policy

This section explains cookies and similar technologies used on the Site.

8.1 What Cookies Are

Cookies are small text files placed on your device by websites you visit. Cookies help websites function, remember preferences, and understand usage.

We may also use:

Pixels/web beacons (tiny images that help measure activity)
Local storage (browser-based storage)
Similar identifiers for analytics and attribution

8.2 Types of Cookies We May Use

Depending on your region and consent choices, the Site may use:

A. Strictly Necessary Cookies

Required for core functions such as:

Load balancing
Security
Consent preference storage
Basic site functionality

These usually cannot be disabled without breaking the Site.

B. Performance and Analytics Cookies

Used to measure and improve Site performance, such as:

Page views and engagement
Traffic sources
Feature usage and error rates

Where required, these are set only after consent.

C. Functional Cookies

Used to remember choices (where applicable), such as:

Language or region
Display preferences

D. Advertising / Affiliate / Attribution Cookies

Used to:

Track that you clicked an affiliate link
Attribute conversions to Ratesautority
Measure partner performance and prevent fraud

Important: These cookies may be placed by third-party affiliate networks or partner platforms.

8.3 Cookie Duration

Cookies may be:

Session cookies (expire when you close your browser)
Persistent cookies (remain until they expire or you delete them)

Affiliate attribution cookies often persist for a set “attribution window” defined by the partner or network.

8.4 Managing Cookies

You can control cookies through:

Your browser settings (block, delete, or restrict cookies)
Device-level controls (for certain environments)
Any on-site cookie banner or preference manager (if present)

Blocking cookies may affect site features and may prevent affiliate links from being properly attributed.

Practical example: If you block all cookies, the partner may not recognize that you came from Ratesautority, which can also reduce our ability to keep the Site free.

9. Google Analytics (If Used)

We may use analytics services such as Google Analytics to understand how the Site is used. Depending on configuration and legal requirements, we may take steps intended to reduce identifiability, such as:

Using IP anonymization or similar controls where available
Limiting data sharing settings when feasible
Respecting consent choices where required by law

Analytics tools may set cookies or use similar technologies to collect usage data.

10. Social Media Widgets and Sharing

If the Site includes social sharing buttons or embedded social content:

These features may collect your IP address and page activity
They may set cookies or use local storage
Your interactions may be governed by the social platform's terms and privacy policy

11. California Privacy Rights (CCPA/CPRA Notice)

If you are a California resident, California law may provide rights regarding your “personal information” as defined by the CCPA/CPRA.

11.1 Categories of Personal Information We Collect (Typical)

Depending on your use of the Site, we may collect:

Identifiers (e.g., IP address; newsletter email if provided)
Internet activity (e.g., pages viewed, clicks, referral URLs)
Device information (e.g., browser type, OS)
Approximate location (derived from IP)

We do not intentionally collect sensitive personal information (as defined by CPRA) for the purpose of inferring characteristics about you.

11.2 Purposes for Collection

See Section 3 (operations, analytics, affiliate attribution, newsletter communications, security, legal compliance).

11.3 “Selling” or “Sharing” Personal Information

Some cookie-based disclosures for advertising/affiliate attribution may be considered “selling” or “sharing” under California law, even if no money is exchanged, particularly where cookies are used for cross-context behavioral advertising.

Where required, we provide a mechanism to opt out of such activity (commonly labeled “Do Not Sell or Share My Personal Information”) and/or honor browser-based opt-out signals where applicable.

11.4 Your California Rights

Subject to exceptions, you may have the right to:

Know what personal information we collect, use, disclose, sell, or share
Delete certain personal information
Correct inaccurate personal information
Opt out of sale/sharing (if applicable)
Limit use/disclosure of sensitive personal information (if applicable)
Non-discrimination for exercising your rights

11.5 Submitting Requests

Where the Site offers a privacy request mechanism, you may submit requests using the on-site process. We may need to verify your request using information related to your interaction with the Site (for example, confirming access to the email address used for newsletter signup).

Authorized agents may submit requests where permitted; we may require proof of authorization and verification of identity.

12. Do Not Track Signals

Some browsers transmit “Do Not Track” (DNT) signals. Because there is no uniform industry standard for DNT, the Site may not respond to DNT signals in a consistent way across all technologies.

Where legally required, we instead rely on:

Cookie consent mechanisms (where applicable)
Opt-out preference signals recognized by law (where applicable)

13. Data Retention

We keep information only as long as reasonably necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.

Typical retention examples:

Newsletter data: retained until you unsubscribe, plus a limited period to maintain suppression lists (to respect opt-outs) and for compliance/audit needs.
Analytics data: retained for a limited duration depending on configuration and business needs (often months, not years, where feasible).
Security logs: retained for a limited period to investigate incidents, prevent abuse, and maintain site integrity.

We may delete, anonymize, or aggregate data when it is no longer needed.

14. Security Measures

We use reasonable administrative, technical, and organizational measures designed to protect information, such as:

Access controls and least-privilege principles
Monitoring for suspicious activity
Encryption in transit (e.g., HTTPS)
Vendor risk considerations (where applicable)

No method of transmission or storage is 100% secure. You use the Site at your own risk.

15. International Data Transfers

If you access the Site from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate.

For EEA/UK/Swiss users, where required, transfers may rely on safeguards such as:

Standard Contractual Clauses (SCCs) and supplemental measures as appropriate
Other lawful transfer mechanisms recognized by applicable law

16. Children's Privacy (COPPA)

The Site is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

If you believe a child under 13 has provided personal information, that information should be removed where legally required and feasible.

17. Automated Decision-Making and Profiling

Ratesautority does not typically engage in automated decision-making that produces legal or similarly significant effects about individuals (for example, we do not approve or deny credit). Third-party providers you visit may use automated decision-making in connection with applications, underwriting, or eligibility decisions; their policies govern.

18. Data Subject Rights (EEA/UK/Swiss Visitors)

Subject to applicable law, you may have rights to:

Access your personal data
Rectify inaccurate data
Erasedata (“right to be forgotten”)
Restrict processing
Data portability
Object to processing (including certain legitimate interests)
Withdraw consent (where processing is based on consent)
Lodge a complaint with a supervisory authority

Where the Site provides a method to exercise these rights, requests can be submitted through that on-site process.

19. Changes to This Policy

We may update this Policy from time to time to reflect changes in:

Legal requirements
Technology and cookies used
Business practices (e.g., new analytics or affiliate networks)

When we update the Policy, we will revise the “Last Updated” date at the top. Your continued use of the Site after changes means you understand the updated Policy applies from that date forward, to the extent permitted by law.

20. Practical Scenarios (Examples)

To make the above easier to understand, here are real-world examples:

You read an article about “best personal loans.”
We may collect analytics data such as page views, scroll depth, and clicks to understand which sections are helpful.
You click an affiliate link labeled “Check Eligibility.”
An affiliate tracking ID may be created so the partner can attribute your visit to Ratesautority.
You decline marketing cookies in the cookie banner (where shown).
Non-essential tracking cookies may not be set, though essential cookies may still operate for security and preferences.
You subscribe to a newsletter.
We store your email to send requested updates. You can unsubscribe later using the mechanism in the emails.
You apply for a product on a third-party site.
The third party collects application data; Ratesautority generally does not receive your full application details.

21. Glossary

Affiliate Link: A link that may generate a commission for Ratesautority if you click it and/or complete a transaction with a third party.
Analytics: Tools and processes used to measure website usage and performance.
Controller: The entity that determines why and how personal data is processed (often the website operator).
Cookies: Small files stored on your device to help websites function and remember information.
Personal Data / Personal Information: Data that identifies, relates to, describes, or could reasonably be linked to an individual (definitions vary by jurisdiction).
Processor: A service provider that processes personal data on behalf of a controller.
Third Party: Any entity other than Ratesautority, including affiliate partners, vendors, analytics providers, and social platforms.
Tracking Pixel / Web Beacon: A small element used to measure activity such as page views or email opens.
UTM Parameters: Tags added to URLs to measure campaign performance and traffic sources.

Printable Version Notice

This Policy is intended to be readable online. You are encouraged to save or print a copy for your records.

By using the Site, you acknowledge that you have read and understood this Privacy Policy & Cookie Policy and agree to its application to your use of the Site, to the extent permitted by law.