Why Card Offers Sit in a Protected Category
Google publisher policies do not treat every product category the same. In the US and Canada, personalized advertising delivered through Google platform products or Google ad code may not be selected or targeted using an audience's gender, age, parental status, marital status or postal code for three groups: housing and real estate services, employment services, and credit-related products, banking products and certain financial planning and management services. That third group is where card marketing lives. The practical effect is narrow but decisive: a campaign can still reach a market, but it cannot use those five attributes to decide which people inside that market see the offer.
What the Credit Category Actually Covers
The published examples are illustrations, not a closed list. They include credit cards and loans, bank and checking accounts, and debt management products, alongside certain financial planning and management services. For a card publisher, that means the category is wider than the card itself: the landing page, the application flow and any debt-payoff tooling around it sit in the same neighborhood. Edge cases — secured cards, retail co-brands, charge cards — are not spelled out, so treat the text as a category boundary that has to be interpreted rather than a checklist that clears you.
Sensitive Financial Signals Beyond Demographics
Removing age and zip code is not the whole job. Personalized ad selection and audience-list use are also barred when they rely on sensitive information, and the policy names negative financial status information as an example, including signals that a user has a low credit rating or a high debt burden. Two consequences follow. First, an audience assembled from inferred financial distress — a "rebuilding credit" segment built out of behavioral hints — is precisely the kind of input these rules point at. Second, the same clause bars personalization from activity on adult, gambling or government sites and from users known to be under 13, which matters when a card offer is folded into a broader content site.
The Disclosure Chain Behind a Card Placement
Targeting limits arrive with documentation duties. Where Google platform products or ad code power the personalized ads, the advertiser must hold every right needed to use audience data such as cookie lists; the ads must carry a statement that they are interest-based, such as the Ad Options icon; and the parties must follow self-regulatory codes for online behavioral advertising, with the Digital Advertising Alliance principles named for this market and the IAB Europe framework applying in its own region. At the publisher level, a privacy policy must clearly disclose the collection, sharing and use of data connected to Google products — cookies, web beacons, IP addresses and other identifiers — and must state that third parties may place and read cookies in a visitor's browser because of ads on the site. Publishers may not set cookies on Google domains, may not pass data Google could treat as personally identifiable, may not merge identities without advance notice and explicit consent, and may not attempt to break down aggregated reporting.
Where the Restriction Does Not Reach
The five-attribute limit is written against personalized advertising. The policy text does not forbid a card offer from appearing beside card-related content a reader chose to open, and it leaves room for placements selected by page context rather than by assumptions about the person viewing it. That distinction is worth protecting deliberately: an editorial page about balance transfers, a calculator a reader opted into, and a card comparison table all describe context, while an uploaded list, an inferred hardship segment and a postal-code slice describe people. When a team blurs those two, the placement starts to look like the thing the clause prohibits.
Claims That Fail Before Targeting Does
Some card pages are refused for what they promise, not for whom they chase. The misrepresentation rules forbid distorting, falsely stating or concealing information about the publisher, the purpose of the content or the content itself, and forbid implying an affiliation or endorsement that does not exist. Penalty guidance separates two tiers. Vague, non-specific promises — "find the best card offers near you" with no actual list behind it — are ordinary violations. Concrete promises outside the publisher's control, including a promise of a loan or a line such as opening an account with no credit check, are treated as egregious. Layout is covered too: paid promotional content may not take up more space than the publisher's own content, and screens with no publisher content or low-value content are not eligible placements.
A Pre-Launch Check for a Card Comparison Page
- Strip gender, age, parental status, marital status and postal code from any request capable of serving a credit-category ad.
- Retire custom segments whose logic depends on inferred credit difficulty or debt load.
- Confirm rights and consent for every uploaded list and cookie-based audience.
- Verify the interest-based notice appears and that self-regulatory principles are reflected in your process.
- Read the privacy policy against the cookie, beacon, identifier and third-party placement disclosures.
- Compare paid promotional area to editorial area on the page itself.
- Rewrite any line that promises approval, a limit, or a no-check outcome your organization does not control.
What the Policy Text Leaves Open
The published rules define obligations, not enforcement mechanics; they do not explain how a given violation is detected, and Google reserves the right to revise them, placing the burden of staying current on the publisher. The five-attribute limit is stated for the US and Canada specifically, so a campaign running elsewhere needs whichever text governs that market rather than this clause. Platform compliance also runs on a separate track from legal review of the credit terms: clearing an ad review does not settle disclosure or licensing questions that belong with your own compliance and legal advisors.
The workable posture is context rather than people. Build card pages that readers reach through content they chose, document the disclosure chain behind every personalized placement, and re-read the current policy text before each campaign flight.