Privacy policy

creditunions.online (Credit Union Ledger, "we") is an independent website. This page says what we collect when you use the site or write to us, what we do with it, and what you can ask us to do about it. The short version: reading the site sends us nothing personal, and when you write to us we keep your message to reply to you. We don't sell or share what you send.

Who we are

creditunions.online is an independent website. Contact us at hello@creditunions.online or through the contact form.

What we collect

The contact form (on /contact/) sends us your name, your email address and your message.

The contact form also receives, in hidden fields: the page you sent it from, the consent sentence shown beside the button, the referring page that brought you to the site, and any campaign tags (utm_ parameters) in the link you first followed. The site remembers those last two for the length of your visit in your browser's session storage, which is cleared when you close the tab. A hidden "leave this empty" field catches spam robots.

An alert (on each credit union's page, "email me when its next quarter is posted", and on the data page, "email me when NCUA posts a new quarter") stores your email address, the credit union or dataset you picked and the sentence you agreed to. Alert emails haven't started yet; the first one will ask you to confirm, and every one carries a link that unsubscribes you or deletes the sign-up outright. We use an alert address only to send that alert. Watching a credit union tells us nothing about whether you are a member, and we don't treat it as if it did.

Credit union pages may ask our server for the newest NCUA figures when you open them; that request carries no personal information.

When you browse, our host, Cloudflare, processes technical information such as your IP address, browser type and the pages you request, to deliver the site and protect it from abuse.

We don't run analytics, advertising pixels or session recording, and the site sets no tracking cookies.

Please don't send account or member numbers, government ID numbers or passwords through a form. We don't ask for them.

Where it goes

A contact message is stored in a database we run on Cloudflare (Cloudflare D1) and emailed to the person who answers messages for Credit Union Ledger, using Cloudflare's email service. An alert sign-up is stored in the same database. That's the whole path.

How we use it

To read and answer your message, to send alerts you asked for, to fix figures you tell us are out of date, to keep the site running and secure, and to meet legal obligations.

Sharing

We don't sell what you send, and we don't share it with credit unions, NCUA, lenders or advertisers. The only companies that handle it are the service providers that run the site and deliver our email (Cloudflare), and only to do that job. We would disclose information if the law required it, for example in response to a valid subpoena. If the site is ever sold, its records would go to the buyer, and we would post a notice here first.

If that ever changes, we will update this policy first and ask for your consent on the form before sharing anything.

How long we keep it

We delete contact messages 24 months after we receive them, sooner if you ask. An alert sign-up is kept until you unsubscribe or delete it; an unsubscribed address is kept only as a do-not-send record unless you ask us to erase it. Cloudflare keeps its own technical logs for short periods under its policies.

Your rights

You can ask us what we hold about you, ask us to correct it, ask us to delete it, or ask for a copy. Email hello@creditunions.online or use the contact form (choose "Privacy request"), giving the email address you used. Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with consumer privacy laws have these rights under those laws to the extent they apply to us. We don't sell or share personal information for targeted advertising, so there is nothing to opt out of, and we honor Global Privacy Control signals anyway. We won't treat you differently for using any of these rights. If we decline a request, reply to our answer (or send another privacy request) to appeal and someone who didn't make the first decision will look at it again.

Children

This site is for adults. It is not meant for anyone under 18, and we don't knowingly collect information from children under 13.

Security

The site is served only over HTTPS, and form messages are stored in an access-controlled database. No system is perfectly secure, which is one more reason not to send account details.

Changes

When this policy changes, we update this page and the date at the top. A change that would share your information would come with a consent request on the form first.

Contact

Questions or requests about privacy: hello@creditunions.online, or the contact form (choose "Privacy request").