Privacy policy
Your data, kept small.
CardFit works without an account and never runs a credit check. Here is everything we collect, why, and who else sees it.
Last updated October 2026. CardFit (www.cardfit.me) is run by Aashish Shah, who is responsible for your data. Questions or requests: shahaaseesh@gmail.com.
What we collect
Your quiz answers, kept in your browser. When you use Find Me a Card or the card browser, your answers (monthly spending by category, cards you already hold, credit range, fee and reward preferences) and the cards you recently viewed are saved in your browser's local storage, so the site remembers them next time. They stay on your device.
Your name and email, only if you choose to save. The last quiz step offers to save your matches. If you enter your name and email there, we store them in our database, together with your quiz answers and a scrambled (hashed) copy of a random key kept in your browser. Only a browser holding that key can load the profile, so knowing your email isn't enough to see it. Skip that step and nothing is stored outside your browser.
Usage statistics. Vercel Web Analytics counts page views and records the page, the referring site, your country, and your device and browser type. It doesn't use cookies and doesn't identify you across sites.
Emails you send us, so we can reply.
We never ask for your Social Security number, income documents, card numbers or bank details, and we never check your credit.
Who else processes it
- Supabase hosts our database (saved profiles) and the servers behind our AI features.
- OpenAI powers two AI features. When a plain-English search isn't understood locally, the search text is sent to OpenAI to interpret it. When a card shows a personalised note, we send the card's details and your quiz answers (spending, cards you hold, credit range, preferences) to OpenAI to write it. Your name and email are never sent.
- Vercel hosts the site and runs the analytics described above. Like any web host, it receives your IP address when you load a page.
- Google serves the site's fonts (Google Fonts), which means your browser sends Google its IP address, and serves ads (below).
We don't sell or rent your personal information, and we don't share your name, email or answers with card issuers.
Advertising and cookies
CardFit may show ads served by Google AdSense. Google and other third-party vendors use cookies to serve ads based on your previous visits to this site and other sites. Google's advertising cookies let it and its partners show you ads based on your visits to CardFit and other sites on the internet.
You can turn off personalised ads in Google's Ads Settings, and opt out of many third-party vendors' cookies at aboutads.info. Google explains how it uses information from sites that use its services.
Visitors in the European Economic Area, the UK and Switzerland are asked for consent before personalised ads are shown. CardFit itself sets no cookies; the browser storage described above is used only to remember your answers.
How long we keep it
Answers in your browser stay until you clear your browser's site data. A saved profile stays in our database until you ask us to delete it. Analytics are kept in aggregate.
Your choices and rights
You can clear everything stored in your browser by clearing site data for cardfit.me. To see, correct or delete a profile saved with your email, write to shahaaseesh@gmail.com from that address and we'll handle it within 30 days. Depending on where you live (for example California, the EU or the UK), you may have further rights, such as to object to processing or complain to your data protection authority; we honour them whatever your location.
Children
CardFit is about credit cards and is meant for adults. It isn't directed at children under 13, and we don't knowingly collect their information. If you think a child has saved a profile, email us and we'll delete it.
Changes
If we change what we collect or who processes it, we'll update this page and the date at the top.