Update
Affiliate outbound links are now signed and logged
2 September 2026
When you tap an “Apply” button on a card page, you now go through a signed redirect: each click carries an HMAC signature and a one-time nonce, and the event is logged so we can attribute conversions to the right partner without handing out raw traffic data.
Privacy notes:
- No raw IP addresses are stored. Clicks are logged against an HMAC hash of your IP, not the IP itself.
- No personal data is passed to partners beyond what the issuer’s own application form requires.
- Disclosure is unchanged. FinWiz24 earns a commission on approved applications from some links. That money never touches scoring — the methodology is documented at /legal/review-methodology/.
The change affects every card page and the /go/ endpoint family. Direct links to issuer websites are unaffected.