Privacy Policy

Last updated: 12 April 2026

WhichWise is an independent credit card comparison site. We do not require accounts, do not sell products directly, and collect the minimum data needed to operate. This policy explains what we collect, why, and what rights you have under the Digital Personal Data Protection Act, 2023 (DPDPA).

What we collect

  • Analytics events (Google Analytics 4 and Cloudflare Web Analytics): page views, referring site, device type, approximate region. No names, emails, phone numbers, or card numbers. GA4 only sets cookies after you accept; until then it runs in a cookieless mode. Cloudflare Web Analytics is always cookieless.
  • Your consent choice: stored in your browser's localStorage under the key consent. Never sent to a server.
  • Server logs: standard web server logs (IP address, request path, timestamp) retained for up to 30 days by our hosting provider for abuse prevention.

We do not run any forms, do not collect email addresses, and do not require you to sign up. You can read every page on this site without giving us anything.

Why we collect it

Analytics tells us which guides and card pages are useful so we know where to focus our editorial effort. That is the only purpose. We do not build advertising profiles, sell data to third parties, or run remarketing campaigns.

Third parties

  • Google Analytics 4: uses Google Consent Mode v2 with the default state denied. Before you accept, it sends only cookieless, non-identifying pings; it sets analytics cookies and collects full analytics only after you click “Accept” on the cookie banner.
  • Cloudflare Web Analytics: a privacy-first, cookieless analytics tool. It sets no cookies, collects no personal data, and builds no cross-site profiles, so it runs for all visitors without requiring consent.
  • Vercel: our hosting provider. Serves the pages you request and maintains standard server logs.
  • Card issuers' official sites: when you click “Apply Now” you leave WhichWise and land on the bank's official page. Their privacy policy applies from that point onward. We do not track or receive data about what you do on the bank's site.

Your rights under DPDPA

Under the DPDPA, you have the right to:

  • Access, correct, or delete any personal data we hold about you.
  • Withdraw your consent to analytics at any time: clear your browser's site data for www.whichwise.com, or use the “Cookie Preferences” link in our footer.
  • Lodge a complaint with the Data Protection Board of India.

Because we do not maintain user accounts or collect personally identifiable information, the data we hold about any individual is effectively limited to anonymous analytics. If you believe we hold data about you and want it removed, email us using the address below and we will comply within 30 days.

Children

WhichWise is not directed at anyone under 18. We do not knowingly collect data from children. Credit cards in India are issued to adults only.

Changes to this policy

We will post any material change on this page with a new “last updated” date. Substantial changes will also be noted on our editorial policy page.

Contact

Privacy questions, data requests, or complaints: hello@whichwise.com.