The Audit Trigger: Segments Still Attached to Card Pages
You publish card comparison, review or offer-listing pages. Your ad platform exposes gender, age, parental status, marital status and ZIP code. The pages are unchanged; the compliance question is not. Which signals may remain attached to credit-card inventory, and do the surrounding copy and search terms survive the same review? The evidence is Google's publisher and AdSense for Search text: what may attach to personalized ads on a card site, not what a lender, regulator or statute permits.
The US and Canada Rule, Stated Plainly
Google's publisher policy on personalized ads says that, in the US and Canada, personalized ads may not be selected or targeted using an audience's gender, age, parental status, marital status or ZIP code for credit-related products or services, banking products and services, or certain financial planning and management services. Credit cards and loans are the policy's own example of the first category, named with bank and checking accounts and debt management products.
The restriction is geographic: the text frames it for the US and Canada, so other markets need applicable regional wording. It is also scoped to named product categories, and a card page sits inside them.
| Audience signal | Restricted for US credit-card personalized ads? | Basis in retrieved policy |
|---|
| Gender | Yes | US/Canada rule, personalized ads |
| Age | Yes | Same rule |
| Parental status | Yes | Same rule |
| Marital status | Yes | Same rule |
| ZIP code | Yes | Same rule |
| Low credit rating or high debt burden | Yes | General sensitive-information rule, no US/Canada limit |
| Interest or behavioral targeting via cookie lists | Not barred, but conditional | Conditions for personalized ads |
| Under-13, child-directed, or adult/gambling/government-site activity | Yes, any product category | General personalized-ads prohibition |
Read the bottom rows carefully, because audits go wrong there. Cookie-list interest targeting is not forbidden by the demographic bullet, but conditioned. The sensitive-information row sits under a different rule with different scope. The final row applies whether or not the page mentions credit cards.
The Rule It Gets Confused With: Sensitive Financial Information
A separate bullet bars personalized-ad selection or targeting on sensitive information, naming negative financial-status details such as low credit rating or high debt burden.
That bullet carries no US/Canada limitation in the retrieved text; it reads as a general prohibition. A card site cannot retire a ZIP segment, substitute an inferred "subprime" or "high-debt" audience, and call it compliant. The rules also fail differently: the demographic list is geographic and category-bound, while the sensitive-information list is neither.
Where the Restriction Bites: Search Terms and Offer Wording
Segment lists are one surface; two others fail quietly.
Partner-provided related-search terms. Terms supplied for a related-search unit must aim at the most relevant query suggestions, must not generate particular ads or inflate impressions, clicks or conversions, and must not target specific users or groups based on shared attributes such as demographics. A "credit card" suggestion written for one age band, or for parents, is out of bounds even though the words are ordinary. Separately, AFS queries must be typed and submitted without editing or filtering: no pre-filled terms in the box, no links carrying pre-filled terms. Ads must be labeled, distinguishable from organic results, and never outnumber them.
Offer wording. Retrieved AFS violation examples treat concrete, unachievable promises as egregious: free or cash offers, unreasonably cheap offers, promises to lend, and promises outside the advertiser's control, illustrated by wording about opening a high-yield savings account with no credit check. Affiliate-written instant-approval or no-credit-check phrasing on a card page has the same shape. Misleading prompts such as "click here for the best offer" are listed patterns that encourage accidental clicks.
What Must Be in Place Before Personalized Card Ads Run
Switching off prohibited segments is necessary but not sufficient. Personalized ads are also conditioned on three items: the publisher must hold all necessary rights to audience data such as cookie lists; the ads must carry an interest-based notice, such as the AdChoices icon; and the parties must follow applicable self-regulatory codes, such as the Digital Advertising Alliance's Online Behavioral Advertising principles. Information supplied to Google, including ads.txt and app-ads.txt declarations, must be accurate and complete; materially inaccurate or misleading site information is itself a violation.
AFS placements add physical constraints: search results pages only, a maximum of two search ad boxes per page, no framing of results, and no removal or alteration of the Google logo.
A Six-Step Remediation Sequence
- Inventory audience signals attached to card inventory, including third-party segments.
- Classify placements by product category: credit-related, banking, or financial planning and management. If it fits, the US/Canada list applies.
- Disable gender, age, parental status, marital status and ZIP for those placements, and keep a dated record.
- Sweep for sensitive-information segments such as low credit rating or high debt burden, and remove them regardless of geography.
- Document rights behind remaining cookie-list or interest segments, confirm the interest-based notice is live, and confirm self-regulatory adherence.
- Re-read search terms and page copy: typed queries only, no pre-filled terms, no demographic framing, no unachievable promise, no accidental-click prompt.
Limits of This Guidance
The evidence is Google publisher and AFS policy text. No statute, regulator or court material was retrieved, and nothing here is legal advice; fair-lending, advertising or consumer-credit questions belong with qualified counsel. The demographic rule is written for the US and Canada only. Policy wording can change, so re-check the linked help pages before acting. Penalty-table strike mechanics are left unstated pending a confirmed public URL, and no card product, issuer, APR, fee, approval odds or application data appears because none was retrieved. Ad volume and revenue outcomes remain platform decisions.