What we collect
When you browse, we collect standard server logs (pages requested, browser type and a hashed form of your IP address). Google Analytics measures visits and page use; Google may use cookies and receives technical information such as your browser and the page you view. We send page paths without query strings. When enabled, PostHog collects page URLs, clicks, page content and session recordings. PostHog may use browser storage such as cookies or local storage. Recordings are not masked and may include information typed into a request form, including contact details, address, date of birth or financial details if requested. We also count how visitors reach us: the website that sent you (its domain only, never the full address) or the campaign tags in the link you followed. When you arrive that way, we set one cookie of our own, bcmd_src, that remembers that source for 30 days so we can see which sources lead people to our request page; it holds no name, contact details or other personal information and is not shared with our lending network partner or lenders. Fonts are hosted on our own site. When a request form is run by our lending network partner, the partner receives what you enter there and we do not. When you use a request form hosted on our own site, we collect only what that form asks for: your state, the amount you want, contact details, address, date of birth and income. Our form does not ask for your Social Security number or bank account.
Why we collect it
We use what our own form collects to pass your request to our lending network partner, to keep a record of the consent you gave, to prevent fraud and to meet our legal obligations.
Who we share it with
Our lending network partner receives your request and shares it with lenders under its own terms and privacy policy; read them in its form before you submit. We pass what our own form collects only to that partner and to service providers that help us run BadCreditMD under contract. We do not sell your information to data brokers.
The request form on our request page is run by our lending network partner, not by BadCreditMD. When it loads, the partner's form sets cookies on this site to test versions of the form and to recognize your visit, and it sends form events (such as which step you reached) to the partner's analytics service. The information you enter in that form goes to the partner and the lenders it shares your request with, not to us.
How we protect it
We keep a written information security program aligned with the FTC Safeguards Rule, encrypt data in transit and restrict access to people who need it.
Your choices
You can opt out of calls and texts at any time by replying STOP or by contacting us. Depending on your state, you may have rights to access, correct or delete your information. Contact us to make a request.
Contact
Questions about this policy: see our contact page.