Free Card Application

Privacy Policy

Privacy Policy for 免费申卡
Aug 31, 2026

Effective date: August 31, 2026

Last updated: August 31, 2026

Welcome to 免费申卡 (Free Card Application) at https://xinyongka.net.cn (the “Website”). This Privacy Policy explains how the Website operator (“we,” “us,” or “our”) processes and protects personal information when providing credit-card information, application-channel guidance, agency-partnership guidance, account features, and related Website functions.

Please read this Policy before using the Website. Where consent is required by law, we will request it as required, and you may refuse or withdraw consent for non-essential processing. If you follow a link to a bank or another third party, that third party processes information submitted on its page under its own privacy rules.

1. Scope and Nature of the Service

This Policy applies to personal-information processing that occurs when you visit or use the Website, its accounts, pages, and interactive features.

The Website displays credit-card information, benefits, eligibility information, and links to banks or partner channels. The Website is not a bank, card issuer, lender, credit-reporting agency, or credit decision-maker. We do not approve applications or decide limits, annual fees, benefits, review times, or issuance outcomes.

This Policy does not govern services independently provided by banks, application channels, agency platforms, or other third parties. Before submitting identity, bank-card, income, employment, contact, or other information on a third-party page, review that party’s privacy notice and authorization terms.

2. Operator and Contact Channel

  • Website name: 免费申卡
  • Personal information processor: the operator of the 免费申卡 Website
  • Website: https://xinyongka.net.cn
  • Contact channel: submit a request through the latest customer-service or contact entry displayed on the Website and label it “Personal Information Request.” We may verify your identity before responding.

If the Website later publishes the operator’s full legal name, a dedicated email address, or another contact channel, the latest published information will apply.

3. Information We Process and Why

We process personal information lawfully, fairly, in good faith, and only to the extent necessary for clear and reasonable purposes.

3.1 Access, Operations, and Security

Our servers and security services may automatically record your IP address, access time, requested URL, referring page, browser and version, operating system, device type, User-Agent, Client Hints, page loads, API requests, errors, and suspicious activity. We use this information to operate and secure the Website, diagnose failures, prevent fraud and abuse, understand service performance, and comply with network-security obligations.

3.2 Registration and Accounts

If you use registration, sign-in, account-management, or administration functions, we may process your name or nickname, email address, one-way password hash, email-verification status, account role and permissions, registration and login times, login IP, session information, and security records. We use this information to create and manage accounts, authenticate users, maintain sessions, recover accounts, allocate permissions, and protect account security. You do not need to register if you only use features that do not require an account.

3.3 “免费申卡” and “代理赚钱” Button Clicks

When you actively click a “免费申卡” (Free Application) or “代理赚钱” (Agency Opportunity) button, we may process the following information to complete the redirect, measure feature use, investigate anomalies, and alert operators through the configured Feishu group bot:

  • the action clicked, timestamp, current page, referrer, and destination URL;
  • IP address, User-Agent, browser name and version, operating system, device type, and platform;
  • browser languages, time zone, screen and viewport dimensions, and device-pixel ratio;
  • logical processor count, browser-reported device memory, and maximum touch points; and
  • an anonymous device-characteristic digest calculated from a limited set of these attributes.

The digest is generated with a one-way hash and is used mainly to recognize repeated clicks and security anomalies. It is not your name, national ID number, or bank-card number. If the digest can still be associated with you or your device, we continue to protect it as personal information. We do not currently read Canvas images, WebGL graphics, installed fonts, contacts, or files on your device to create this digest.

The click endpoint does not currently store these click details in the Website’s application database; it sends them to the configured Feishu group bot. Retention in Feishu depends on the applicable Feishu service and group-administration settings. If you do not want a click record to be generated, do not click these buttons and instead visit an issuing bank’s official website directly.

3.4 Cookies and Similar Technologies

The Website may use cookies, local storage, or similar technologies to maintain login sessions and security state, remember interface preferences, record dismissed notices, and keep the Website working. Necessary cookies may be required for login and security. Where applicable law requires consent for non-essential analytics or preferences, we will request it. Blocking or deleting cookies may prevent some features from working.

3.5 Analytics

When enabled by an administrator, the Website may use Baidu Analytics, Vercel Analytics, or similar analytics services to process page visits, sources, device information, and interaction data for aggregate performance measurement and Website improvement. A third-party analytics provider may use cookies or similar identifiers under its own rules. We limit the data to the service actually enabled and seek to minimize identifiable information.

3.6 Support and Information You Submit

If you contact us for support, feedback, complaints, or privacy requests, we process the contact details, communications, and materials you choose to provide as needed to respond. Do not send national ID numbers, full bank-card numbers, passwords, verification codes, or other highly sensitive information unless strictly necessary and requested through a verified channel.

3.7 Credit-Card Application Data Not Collected Directly by Us

The Website currently opens third-party pages in a new window for its application and agency functions. Identity documents, bank-card details, income, employer, contacts, credit-report authorizations, and other application data entered on those pages are collected directly by the relevant third party. Providing a link does not mean that we receive or store the complete application form you submit to that third party.

If we later collect new information directly on the Website, we will first explain the purpose, method, scope, retention period, and your rights, and obtain consent or separate consent where legally required.

Depending on the context, we may process information because it is necessary to enter into or perform a contract with you, comply with legal duties, protect life, health, or property in an emergency, reasonably process information you made public or that was lawfully made public, based on your consent or separate consent, or as otherwise permitted by law.

We will not repurpose information in a way that is materially unrelated to the disclosed purpose. If the purpose, method, or categories of information materially change, we will provide a new notice and obtain renewed consent where required.

5. Processors, Sharing, Transfers, and Disclosure

We do not sell personal information or provide it to third parties for purposes unrelated to the Website. The following recipients or service-provider categories may process information necessary for the stated purposes:

  1. Infrastructure and technical providers supporting hosting, content delivery, databases, storage, security, and email.
  2. Feishu group bots and related services receiving the click and device information described in Section 3.3 to notify Website operators.
  3. Analytics providers, such as Baidu Analytics or Vercel Analytics when actually enabled.
  4. Banks and third-party channels acting as independent processors after you choose to follow an external link. Current buttons may lead to domains including apply.yo.com.cn and tui.hjk.com.cn; the page opened at the time of your click controls.
  5. Competent authorities when disclosure is required by applicable law, legal process, or a valid official request.

We require service providers acting on our instructions to process information only for agreed purposes, periods, methods, and security standards. If a merger, division, dissolution, bankruptcy, or similar transaction requires a transfer, we will provide legally required notice and require the recipient to continue honoring this Policy; a new purpose or method will require renewed consent where applicable.

We do not publicly disclose personal information except as permitted by law or with separate consent. If personal information is transferred outside the country or region where required legal safeguards apply, we will complete the necessary notice, separate-consent, and transfer procedures.

6. Retention and Location

We retain personal information only for the shortest period necessary for its stated purpose, unless law requires otherwise. We determine the period by considering the time needed to provide account, security, support, and Website functions; resolve complaints and disputes; comply with statutory log or record-retention duties; and complete reasonable backup and disaster-recovery cycles.

When the period ends or the purpose has been achieved, becomes impossible, or is no longer necessary, we delete or anonymize the information as required by law. If immediate deletion is technically difficult, we stop all processing other than storage and necessary security protection.

Information may be stored in the locations of the servers, databases, and providers used by the Website. If a cross-border transfer occurs, we will follow applicable legal requirements.

7. Security

We use safeguards appropriate to the risk, including access controls, authentication, transmission protection, password hashing, audit logs, role-based permissions, backups, and security monitoring. No internet transmission or storage system is absolutely secure.

If a personal-information incident may harm your rights, we will take remedial action and provide legally required notice to affected individuals and competent authorities, including relevant impact information, response measures, and risk-reduction guidance.

8. Your Rights

Subject to applicable law, you may request access to or a copy of your information; correction or completion; deletion; restriction of or objection to processing; withdrawal of consent; account cancellation; an explanation of processing rules; transfer to another processor where legal conditions are met; or make a complaint or report.

Submit a request through the contact channel in Section 2. We may verify your identity to protect your account and information. We will respond within the period required by law and explain any lawful refusal. You may also complain to the authority responsible for personal-information protection.

9. Minors

Primary credit-card applications and agency opportunities are generally intended for adults with full civil capacity who satisfy the bank’s or partner’s eligibility rules. Users under 18 must not use the Website to initiate a primary-card or agency application.

If another Website feature processes information about a child under 14, we will obtain consent from a parent or guardian and adopt dedicated rules as required by law. If we discover that a minor’s information was collected without proper authorization, we will promptly delete it or take other legally required remedial measures.

The Website contains links to banks, application channels, agency platforms, and other third parties. Once you leave the Website, the third party controls its terms, privacy practices, security, and data processing. Verify the URL, operator, bank authorization, fees, and privacy terms. Be alert to impersonation, requests for verification codes, remote control of your device, unknown downloads, or transfers to personal accounts.

11. Updates to This Policy

We may update this Policy when services, processing activities, or legal requirements change. The revised Policy will be posted here with an updated date. For changes that materially affect your rights, we will provide legally required prominent notice and obtain renewed consent where necessary.

12. Contact Us

For questions, complaints, or requests concerning this Policy or your personal information, use the latest customer-service or contact entry published at https://xinyongka.net.cn and label the message “Personal Information Request.” Do not include passwords, verification codes, or complete bank-card details in your initial request.

We will verify identity where appropriate and respond within the period required by applicable law.