WalletJump California consumer privacy notice

This California Consumer Privacy Notice ("Notice") is provided by Super Energy BV, the operator of WalletJump ("WalletJump," "we," "our," or "us"). It supplements our Privacy policy and applies only to residents of the State of California. It explains how WalletJump collects, uses, discloses, and retains Personal Information relating to California residents, and the rights available under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA").

To opt out of the sale or sharing of your Personal Information right away, see "How to opt out" below.

WalletJump is an independent, advertising-supported publisher and comparison platform operated by Super Energy BV. We publish educational content, reviews, and comparison tools for financial products such as credit cards, loans, insurance, and savings products. We collect and process Personal Information where reasonably necessary to provide our services, improve user experience, maintain security, comply with legal obligations, and operate our business.

Under the CCPA, Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California consumer or household. Personal Information does not include publicly available information lawfully obtained from government records, de-identified information, or aggregated information that cannot reasonably be linked to an individual or household.

Since our launch, we have collected the following categories of Personal Information:

We do not collect: Social Security or other government identifiers; biometric information; precise geolocation; health information; or Sensitive Personal Information as defined by the CCPA. We do not use or disclose Sensitive Personal Information, and we do not use Personal Information to infer characteristics about consumers beyond the purposes described in this Notice.

We collect Personal Information from the following sources:

• Directly from you, when you subscribe to communications, use our comparison tools or search, contact us, or submit a privacy request;
• Automatically from your browser or device when you visit our website, including through cookies, pixels, and similar technologies (see our Cookie policy (/cookie-policy));
• From analytics providers and advertising and affiliate networks — for example, confirmation that a click on a partner offer resulted in an application or account opening, used to calculate compensation owed to us.

We use Personal Information to:

• provide, operate, maintain, and improve WalletJump, including our comparison tools and AI-powered search;
• display and order financial product offers and content, including based on preferences you select;
• measure and attribute clicks on partner offers, calculate compensation from advertising and affiliate partners, and detect click fraud;
• respond to inquiries and provide support;
• send newsletters and marketing communications you have signed up for (you may unsubscribe at any time);
• monitor, analyze, and improve the functionality, performance, security, and reliability of our services;
• detect, investigate, and prevent fraud, security incidents, and other unlawful activity;
• comply with applicable laws, legal process, and regulatory obligations, and establish, exercise, or defend legal claims;
• facilitate corporate transactions such as mergers, acquisitions, financings, or asset sales, where permitted by law; and
• fulfill any other purpose disclosed to you at the time of collection.

Where required by law, we will obtain your consent before using Personal Information for purposes materially different from those described in this Notice.

We may disclose Personal Information for business purposes to the following categories of recipients:

• service providers assisting with website hosting, cloud infrastructure, analytics, email delivery, customer support, fraud prevention, and cybersecurity;
• advertising and affiliate networks and financial institution partners, in connection with tracked clicks on partner offers;
• professional advisers, including legal counsel, accountants, auditors, and insurers;
• corporate affiliates and companies under common ownership or control;
• government agencies, regulators, law enforcement, or courts where required or permitted by law; and
• successors or counterparties in a merger, acquisition, financing, reorganization, or sale of assets.

We require service providers that process Personal Information on our behalf to use it only for authorized business purposes and to implement appropriate safeguards.

California law defines "sell," "sale," "share," and "sharing" broadly. When you click a link to a partner's product on WalletJump, tracking information travels with that click so the referral can be attributed and compensated, and certain advertising cookies and identifiers on our site may be used by advertising partners for cross-context behavioral advertising. This activity may constitute a "sale" or "sharing" of Personal Information under California law.

The categories of Personal Information that may be sold or shared in this way are: identifiers; internet or other electronic network activity information; device and cookie identifiers; approximate geolocation information; and preferences reflected in tracked clicks on partner offers.

We do not knowingly sell or share the Personal Information of consumers under 18 years of age.

California residents may opt out of the sale or sharing of Personal Information by:

• enabling the Global Privacy Control (GPC) browser signal — when we detect a valid GPC signal, we treat it as a request to opt out of sale/sharing for the browser or device transmitting it; or
• contacting us at privacy@walletjump.com with the subject line "Opt out of sale/sharing."

Opting out will not affect your ability to use WalletJump, although certain features may be less personalized.

We retain Personal Information only as long as reasonably necessary for the purposes described in this Notice. Our general retention periods are described in the "Categories of personal information" section of our Privacy policy (/privacy-policy); as a summary: newsletter contact information until you unsubscribe, server and security logs for 90 days, click and conversion attribution data for 12 months, search analytics for up to 90 days, and correspondence and privacy-request records for 24 months. We may retain information longer where required by law or to establish, exercise, or defend legal claims, after which it is deleted, anonymized, or de-identified.

Subject to applicable law and exceptions, California residents have the following rights:

Right to know. You may request that we disclose the categories of Personal Information we have collected about you, the categories of sources, the business or commercial purposes for collecting, selling, or sharing it, the categories of third parties to whom it has been disclosed, sold, or shared, and the specific pieces of Personal Information we have collected about you.

Right to delete. You may request that we delete Personal Information we have collected from you, subject to exceptions permitted by law (for example, where retention is required to comply with legal obligations, detect security incidents, or protect our legal rights).

Right to correct. You may request that we correct inaccurate Personal Information we maintain about you.

Right to opt out of sale or sharing. You may direct us not to sell or share your Personal Information, as described in "How to opt out" above.

Right to limit use of sensitive personal information. We do not collect, use, or disclose Sensitive Personal Information as defined by the CPRA, so there is no such use to limit.

Right to non-discrimination. We will not deny you services, charge different prices, provide a different level or quality of service, or otherwise treat you differently because you exercised your privacy rights.

We do not offer financial incentives in exchange for the collection, sale, or retention of Personal Information.

Submit requests to exercise your rights using the contact information below. Please provide enough information for us to reasonably verify your identity and understand your request — typically your name, email address, and a description of the request. Information provided for verification will be used only to process and respond to your request. If we cannot reasonably verify your identity or authority, we may be unable to fulfill the request.

You may designate an authorized agent to submit a request on your behalf. We may require the agent to provide proof of authorization and may require you to verify your identity directly with us.

We will confirm receipt of verifiable consumer requests within 10 business days and respond within 45 days, extendable by an additional 45 days where reasonably necessary, with notice to you. There is generally no fee; where permitted by law, we may charge a reasonable fee for, or decline to act on, requests that are excessive, repetitive, or manifestly unfounded. If we decline a request, you may appeal by replying to our decision with the subject line "Privacy appeal."

Requests may be submitted using the following contact information:

We may update this Notice from time to time to reflect changes in our business practices, legal requirements, technologies, or services. When we make material changes, we will revise the Effective date at the top of this Notice and publish the updated version on our website.