The Decision Point: A Live Card Page and a Proposed Audience
A live US personal-finance section: a comparison table, two affiliate offer pages, and a proposal to switch on interest-based audiences — ZIP-cluster segments, an age-and-gender split, a "rebuilding credit" list built from past offer clicks. The question is which targeting signals and audience data the publisher policies restrict for credit-card and loan inventory in the US and Canada, and which disclosures and consents must exist before launch. Card selection, APR math, and non-US rules sit outside this.
Category Targeting, Not a Content Ban
The publisher policies name a category: credit-related products or services, banking products and services, and certain financial planning and management services, with credit cards and loans, bank accounts, and debt-management products as examples. It is narrower than teams assume — not a ban on publishing card content, but a rule on how personalized ads for that category may be selected inside the US and Canada, where targeting by the audience's gender, age, parental status, marital status, or ZIP code is forbidden.
The five function as proxies: each can stand in for financial circumstance, and the text offers no combined-segment workaround. Age brackets, gender splits, and ZIP radii are the three that hide inside ordinary builds.
The Sensitive-Data Bar Above the Category Rule
Inferred or actual negative financial-status information — data suggesting a low credit rating or a high debt burden — may not select or target personalized ads, and may not be collected or used through cookie lists or similar audience data. It applies beyond credit pages: a "declined application" or "debt-relief visitor" event used to build a remarketing list collides with the bar wherever the list is deployed.
The closest segments describe hardship — subprime, rebuilding credit, debt consolidation, missed payments. The same sensitive list covers under-13 activity, health, ethnicity, religion, criminal records, politics, union membership, and sexual orientation, so stacking inferred traits compounds exposure. What matters is what the segment implies about finances, not whether the originating click was financial.
When Card Copy Itself Becomes a Violation
Targeting is not the only exposure. Google's violation table lists "specific promises outside of your control" as an egregious example — one violation equals one strike — with a savings-account claim reading "no credit check." For card copy, the rule is attribution: present eligibility, limits, and terms as issuer-determined and variable, never as guaranteed approval, a guaranteed limit, or a claim that everyone qualifies.
Layout adds a second risk: placements that make ads resemble menus, navigation elements, or download links are prohibited, and ads plus paid promotional content may not occupy more screen space than your own content. An offer-heavy table where paid rows crowd out editorial is the pattern to review.
Disclosures and Consents Before the Audience Goes Live
- Data rights and ad notice. Hold all rights required to use audience data such as cookie lists; the advertiser must add an in-ad notice that ads are interest-based, such as an Ad Options icon; all parties must follow applicable self-regulatory codes such as the Digital Advertising Alliance or IAB Europe.
- A privacy policy that covers the mechanics. It must expressly disclose data collection, sharing, and use arising from Google products and services — cookies, web beacons, IP addresses, or other identifiers — on any platform or medium: site, app, connected TV, console, email. A cookies-only or web-only policy falls short.
- The partner-data disclosure. The policy must tell users that third-party vendors may place and read cookies, or use web beacons or IP addresses, because of ads on your site; Google offers a prescribed link to its partner-data page that you can display prominently.
- Cookie boundaries. You may not set cookies on Google domains, or modify, intercept, or delete cookies set there.
- Identity handling. Do not pass Google anything it could recognize as personally identifiable; merging identity with previously collected non-PII requires advance notice plus explicit consent; disaggregating aggregated reporting data is barred regardless of consent.
Two Edge Cases: Precise Location and Child-Directed Inventory
Precise location from GPS, Wi-Fi, or cell-tower data is procedural, not banned: disclose the possible uses (ad personalization, analytics, attribution), obtain explicit prior opt-in, transmit encrypted, and describe the practice in your privacy policy.
COPPA-covered sites or sections must be flagged through Search Console, tagged in ad requests via the AdMob SDK, or marked child-directed. Interest-based ads and remarketing may not target past or current activity of users known to be under 13, or child-directed activity.
Targeting Matrix
| Targeting signal or data type | Status for personalized credit-card/loan ads (US, Canada) | Policy condition or action |
|---|
| Gender, age, parental status, marital status, or ZIP code | Prohibited for the credit-related, banking, and financial-planning category | Do not build these dimensions for card and loan offers; US/Canada only |
| Negative financial-status information, e.g. low credit rating or high debt burden | Prohibited as sensitive data for personalized advertising generally | Do not target on it or collect it via cookie lists or comparable audience data |
| Precise location from GPS, Wi-Fi, or cell towers | Conditional use, not a flat ban | Disclose uses, obtain explicit prior opt-in, transmit encrypted, describe in the privacy policy |
Pre-Launch Audit
Inventory the targeting signals on the page and in the ad stack: age, gender, parental or marital status, ZIP radius. Check the pixels behind each remarketing list and whether a segment name implies hardship. Compare the privacy policy against cookies, web beacons, IP addresses, media types, and the partner-data link. Review card copy for outcome promises and layout for ad dominance.
What This Evidence Cannot Cover
The retrieved text is a Chinese-language consolidation of Google publisher policies; re-verify current English wording at the source. The US/Canada category rule is the only jurisdiction-specific rule here. This is policy explanation, not legal advice: route multi-state or regulated-lending exposure to counsel. No card, rate, fee, or approval data was reviewed, and no vendor was assessed.