Which Pages Fall Inside the Restricted Category
Start with classification, because everything else follows from it. Google's publisher policy states that, in the United States and Canada, personalized ads must not be selected or targeted using audience gender, age, parental status, marital status, or postal code for three groups of products and services. The third group is written as credit-related products or services, bank products and services, or certain financial planning and management services, with credit cards and loans, bank and checking accounts, and debt management products given as examples.
If your page reviews rewards cards, compares balance-transfer offers, walks readers through debt management, or promotes a checking account, it plausibly sits in that group. The classification is not always clean: the policy supplies examples rather than a closed list, and a personal-finance explainer that never markets a credit product reads differently from a page built around applications. When the boundary is unclear, adopt the stricter reading and check the current policy text or ask your own advisers.
Five Attributes, and Where They Arrive Unnoticed
The restricted attributes are short enough to memorize: gender, age, parental status, marital status, and ZIP code. The rule does not bar serving ads on credit card content. It bars using those signals to select or target personalized ads for the listed product groups.
The practical difficulty is that these signals rarely come from a form you built. They arrive inside third-party audience segments, appended demographic layers, and location packages bought for convenience. A campaign described as "homeowners near branch locations" can smuggle in postal code; "new parents planning ahead" can smuggle in parental status. Because the wording ties the overlay to the United States and Canada, a publisher serving a global audience should not assume the same five attributes apply everywhere.
A Separate Limit on Creditworthiness Signals
There is a second rule with a different shape and a wider reach. Personalized ads may not be selected or targeted, and cookie lists or audience data may not be collected or used, on the basis of sensitive information, including negative financial status information and other details about a person's finances, such as information indicating a low credit rating or a high debt burden. This one is not confined to the US and Canada paragraph.
The same list covers health information, ethnicity, religion, criminal history, political affiliation, union membership, and sexual orientation. For credit card publishers, the operative consequence is that a "bad credit" or "credit repair" segment assembled from on-site behavior is exactly the kind of audience the policy excludes. Organize credit content around products and reader questions rather than around presumed creditworthiness, and you avoid building the segment in the first place.
One Brief, Three Flags
A realistic brief makes the rules concrete: "Cash-back card launch, women aged 25 to 34, top ZIP codes, plus a retargeting list of visitors who clicked 'check my odds.'" Three separate flags. Gender and age hit the US and Canada attribute limit; ZIP codes hit it again. The retargeting list needs the closest scrutiny: a list built from a page whose subject implies poor credit matches the pattern the sensitive-information limit targets, while a list built from a general product page deserves written reasoning rather than assumption.
Where Your Duties Sit Relative to the Advertiser's
Advertisers running interest-based ads through Google must carry a notice that the ad is personalized — the AdChoices icon, for example — and all parties must follow applicable industry guidelines such as the Digital Advertising Alliance's self-regulatory principles or IAB Europe's framework. Publishers hold adjacent duties: a privacy policy disclosing the data collection, sharing, and use connected to Google products and services, including cookies, web beacons, and other identifiers, plus a statement that third parties may place and read cookies in a user's browser because ads are served.
Authorization is the third piece: ads must not run on a domain using ads.txt where you are not listed as an authorized seller. The split becomes three questions: which audiences may be built, what readers are told, and whether the inventory may be sold at all.
Copy That Creates Avoidable Risk
Compliance problems on credit card pages tend to come from sentences rather than settings. Google's content policies bar misleading statements and false implication of association with, or endorsement by, another person, organization, product, or service, which matters when a page borrows an issuer's look or implies approval. Separate compliance guidance on disallowed behaviors lists "specific promises outside of your control" and cites a "no credit check" savings account pitch as an egregious example.
Approval odds, guaranteed limits, and instant-decision language carry the same shape of risk: the decision belongs to the issuer, not the page. Write what a reader can verify — fees, how rewards accrue, what a balance transfer actually does — and cut sentences that promise an outcome.
A Practical Sequence Before You Publish
- Classify each page: does it promote a credit, banking, or financial planning product, or merely discuss one?
- Inventory every audience signal in use; if a US or Canadian campaign touches gender, age, parental status, marital status, or ZIP code against a classified page, remove it.
- Sweep cookie lists and audience segments for creditworthiness signals such as low credit rating or high debt burden.
- Confirm the privacy disclosure, third-party cookie language, and the ads.txt entry.
- Read the copy for decisions you cannot make on a reader's behalf.
Two limits deserve plain statement. The policy text is Google's, it may be revised at any time, and publishers are expected to keep up with the current version; enforcement also turns on how a page reads in context, which the text alone cannot settle. And policy compliance is not the same as legal compliance for credit advertising, which is a separate question for your counsel.