Privacy Policy

Last updated: August 6, 2026

This policy explains what PayoffPath collects when you read this site, why, who it is shared with, and what you can do about it. It applies to payoffpath.xyz and any page published under it.

This site is written in English and read across the English-speaking world. Its subject matter — US consumer debt, collections and bankruptcy — means most of our readers are in the United States, so United States law is the primary frame. But the rules that protect you depend on where you are, not on where we are, so this policy also sets out your rights in the United Kingdom (section 11) and in Canada (section 12). Wherever you read from, the substance is the same: we collect very little, we never sell it, and you can have it removed.

The short version: we do not ask you to register, we run no newsletter, we do not enable comments, and we never sell your personal information. The data that does get collected is the data any website receives in order to be served, plus what advertising and measurement technologies collect. Everything below is the detail.

1. Who is responsible for your data

PayoffPath is published by Alonso Pinar Jimenez (“we”, “us”), which is the controller of the personal data described here.

Contact for any privacy matter: zykoadministracion@gmail.com. Write “Privacy” in the subject line and we will answer.

2. What we collect

2.1 Information collected automatically

Server logs. Our hosting records the data every web request carries: IP address, date and time, the page or file requested, HTTP status, the referring page, and your browser and operating system (the user agent). This is how a website is served at all, and how we detect abuse and outages.
Device and browsing data used by advertising and measurement. When advertising or analytics are active, the providers described in sections 4 and 5 may receive your IP address, device identifiers, cookie identifiers, general location derived from your IP (typically city or region, not a street address), the pages you view on this site, and how you interact with an ad.

2.2 Information you give us

The contact form. Our contact page carries a form. It asks for your email address (required, so we can reply), your name (optional), the topic of your message and the message itself. Sending it also records the IP address it came from, which is standard anti-abuse practice for any web form. Nothing else is captured, and the form is processed by the Contact Form 7 plugin running on our own server — it is not sent to a third-party form service.
Email. If you write to us directly, we hold your message, your email address and our reply, so that we can answer and keep a record of corrections requested.

The form asks you to confirm you have read this policy before it will send. That confirmation is your consent to us handling the message for the purpose of answering it, and you can ask us to delete it afterwards.

2.3 What we do not collect

We do not ask for your name, your address, your income, your debts, your Social Security number, your account numbers or any other financial detail. Never send us any of that. This site is a publication, not a service: there is nothing here that requires it, and if you send it we will delete it.

We do not create user accounts, we do not run a mailing list, and comments are disabled site-wide.

2.4 Categories of personal information, as US state law defines them

California and several other states require this disclosure by category. In the twelve months covered by this policy we collect, or may collect once advertising is live:

Category	Examples on this site	Source	Purpose
Identifiers	IP address, cookie and device identifiers	Automatically, from your browser	Serving the site, security, advertising
Internet or network activity	Pages viewed, referring page, time on page, browser and operating system, interaction with an ad	Automatically	Measurement, advertising
Geolocation data	Approximate location derived from IP, typically city or region	Automatically	Advertising, aggregate measurement
Commercial inferences	Interest categories an ad network may infer	Advertising partners	Advertising
Direct identifiers you provide	Your email address and the content of your message	You, if you write to us	Answering you

We do not collect sensitive personal information as those laws define it — no Social Security number, no financial account numbers, no precise geolocation, no health data, no biometric data, no contents of your mail or messages beyond an email you choose to send us.

3. Why we process it

Serving and securing the site (server logs) — so that these pages load, and so we can detect abuse and outages.
Answering your email — so we can reply and keep a record of corrections requested.
Advertising and audience measurement — so the site can be funded and so we know which articles are read.
Complying with law — where a rule requires us to keep or produce something.

For readers in the EEA and the UK, where a legal basis must be stated: the first two rest on our legitimate interest in running a working website and answering the people who write to us; advertising and analytics cookies rest on your consent, withdrawable at any time; the last on legal obligation.

4. Advertising, including Google AdSense

This site is free to read and is intended to be funded by display advertising. Our advertising is served by Google AdSense and, through it, by other third-party vendors and ad networks.

The following disclosures are made in the terms Google requires of its publishers:

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or to other websites.
Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
You may opt out of personalized advertising by visiting Google Ads Settings.
Alternatively, you may opt out of a third-party vendor’s use of cookies for personalized advertising at aboutads.info/choices, or, in Europe, at youronlinechoices.eu.
You can read how Google handles data from sites that use its services at How Google uses information from sites or apps that use our services.

Where advertising has not yet been switched on, these disclosures describe what happens once it is. Ad positions exist in our layout and are reserved but empty until then.

4.1 Where advertising will never appear

Some articles are excluded from advertising on purpose, because monetising them would be indecent: material about medical debt in serious illness, and material addressed to people in acute financial crisis. Those pages stay clean. See our Advertiser Disclosure.

4.2 Consent in the EEA, the UK and Switzerland

Where the law requires consent before advertising or analytics cookies are set, we ask for it through a consent management platform before those technologies run, and you can change or withdraw your choice at any time through the same banner. Refusing does not restrict any content on this site: everything here remains free to read.

5. Analytics

Where analytics are enabled, we use them to count visits and see which articles are read — how many people, from which country, on what kind of device, arriving from where. We use analytics in aggregate. We do not use them to identify you, to build a profile about you, or to follow you across other websites. If Google Analytics is in use, Google processes that data as described in its own policies, and IP handling follows Google’s current defaults for the product.

6. Cookies and similar technologies

A cookie is a small file a website stores in your browser. Similar technologies include local storage, pixels and device identifiers. We group them in three:

Strictly necessary — needed for the site to function, for example if an administrator logs in. These cannot be switched off.
Analytics — aggregate measurement, as described above.
Advertising — set by Google and other vendors to limit repetition, measure performance and, where permitted, personalise what you are shown.

Full detail, and how to control each one, is in our Cookie Policy. Every major browser also lets you block or delete cookies from its privacy settings; blocking them will not stop you reading anything here.

7. Who your data is shared with

We do not sell, rent or trade personal information. Data reaches the following categories of recipient, and no others:

Our hosting provider, which operates the server that delivers these pages and keeps the access logs.
Google, as our advertising provider and, where enabled, our analytics and search-console provider.
Other advertising vendors that participate through Google’s ad networks. The identity of those vendors is disclosed and controlled through the consent banner where it applies.
Authorities, if we are legally required to disclose something, or where it is necessary to establish or defend a legal claim.

8. Where your data is processed

PayoffPath is aimed at readers in the United States, and its providers — principally Google — operate globally. Your data may therefore be processed in the United States and in other countries where those providers run infrastructure.

If you read from the United Kingdom, the EEA, Switzerland or Canada, that means your data may be transferred outside your country. Those transfers rely on the safeguards our providers maintain, in particular the European Commission’s Standard Contractual Clauses and, where the recipient is certified, the EU-US Data Privacy Framework.

9. How long we keep it

Server logs: only as long as they are useful for security and diagnostics, and then rotated out.
Email you send us: as long as needed to answer, and afterwards as a record of any correction we made. You can ask us to delete it.
Advertising and analytics identifiers: retained by the relevant provider under its own retention rules, which are described in its policy.

10. Your rights in the United States

10.1 If you are in California

Under the CCPA as amended by the CPRA you have the right to know what personal information is collected and for what purpose, to request deletion, to request correction, to opt out of the sale or sharing of personal information, to limit the use of sensitive personal information, and not to be discriminated against for exercising any of them.

Sharing personal information with advertising partners for cross-context behavioural advertising may qualify as “sharing” under that law. To opt out, use the consent banner, the Google Ads Settings link in section 4, or write to us at zykoadministracion@gmail.com with “Do Not Sell or Share” in the subject. We honour the Global Privacy Control signal where your browser sends it.

We do not knowingly sell or share the personal information of anyone under 16.

10.2 If you are in another US state

Residents of states with comparable privacy laws — among them Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota and Maryland — have equivalent rights: to confirm and access the personal data we hold, to correct it, to delete it, to obtain a portable copy, and to opt out of targeted advertising and of profiling with legal or similarly significant effects. Several of those states also give you the right to appeal a refusal; if we refuse a request, we will tell you how.

10.3 How to exercise any of this

Write to zykoadministracion@gmail.com. We do not charge for it, we do not treat you differently for asking, and we answer within the period the applicable law allows — 45 days in most states, extendable once where the law permits and we tell you why. We may need to ask you for information to verify a request, and we will use it only for that. An authorised agent may act for you if you give them written permission.

11. Your rights in the United Kingdom, the EEA and Switzerland

Under the UK GDPR and the Data Protection Act 2018 — and, in the EEA, the GDPR — you have the right to:

Access the personal data we hold about you, and be told what we do with it.
Correct it if it is wrong, and complete it if it is partial.
Erase it — the “right to be forgotten”.
Restrict or object to processing, including objecting to direct marketing at any time.
Portability: receive your data in a machine-readable format.
Withdraw consent at any time, without affecting processing already carried out on the basis of that consent.
Not be subject to automated decisions with legal or similarly significant effects. We make none.

Cookies and similar technologies are additionally governed in the UK by PECR, which is why anything beyond a strictly necessary cookie is asked for through the consent banner before it runs.

If you think we have handled your data badly, tell us first — we would rather fix it. You also have the right to complain to your supervisory authority: in the United Kingdom that is the Information Commissioner’s Office (ico.org.uk); in the EEA, the authority of your country of residence.

12. Your rights in Canada

Under PIPEDA, and under provincial law where it applies, you have the right to:

Know what personal information we hold, why we collected it and to whom it has been disclosed.
Access it and request a copy.
Challenge its accuracy and have it corrected.
Withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice.
Challenge our compliance with these principles.

Quebec residents have additional rights under Law 25: portability of the data you provided, de-indexing where the law allows it, and to be informed of and to deactivate any technology used to identify, locate or profile you — which on this site means the advertising and analytics technologies in sections 4 and 5, controlled through the consent banner. Law 25 also requires a named person to be accountable for privacy: for PayoffPath that is the contact in section 1.

Residents of Alberta, British Columbia and Quebec are additionally covered by their provincial private-sector privacy acts, which grant equivalent access and correction rights.

We send no commercial electronic messages, so CASL does not arise: there is no mailing list to be on, and we will never add you to one.

If we do not resolve a complaint to your satisfaction, you may take it to the Office of the Privacy Commissioner of Canada (priv.gc.ca), or to your provincial commissioner in Quebec, Alberta or British Columbia.

13. Children

This site is written for adults and is not directed at children. We do not knowingly collect personal information from anyone under 13, in line with the Children’s Online Privacy Protection Act (COPPA). If you believe a child has provided us with personal data, write to us and we will delete it.

14. Security

The site is served exclusively over HTTPS, access to the administration area is restricted and protected by credentials, and the software is kept updated. No system is perfectly secure, and we will not pretend otherwise; what we can say is that we hold almost nothing worth stealing, because we deliberately collect almost nothing.

15. Links to other sites

We link to government agencies, courts, regulators and other outside sources because they are the primary authority for what we write. We do not control those sites and are not responsible for their content or their privacy practices. Read their policies when you get there.

16. Do Not Track

Browsers can send a “Do Not Track” signal, but there is no common standard for how a site should respond, and we do not act on it. We do act on the Global Privacy Control signal, as stated in section 10.1, and on your choices in the consent banner.

17. Changes to this policy

If this policy changes materially we will update this page and the date at the top. Substantive changes that affect how we handle your data will not be applied retroactively to data already collected under the previous version.

18. Contact

Alonso Pinar Jimenez — PayoffPath
Email: zykoadministracion@gmail.com

See also our Cookie Policy, our Advertiser Disclosure, our Editorial Policy and our Legal Notice.