Privacy Policy

Who We Are

3bfreeze.com is operated by ColdCredit LLC. For the purposes of this policy, ColdCredit LLC is the data controller of any personal information you provide to us. You can reach our privacy team at privacy@coldcredit.co.

Information We Collect

3Bfreeze collects only the minimum information necessary to provide our service. When you create an account, we collect your name and email address. We use this information solely to identify your account and communicate with you about your freeze status.

How We Use Your Information

We use the information we collect to operate and maintain your account, respond to your support requests, and improve our service. We do not sell, rent, or share your personal information with third parties for marketing purposes.

What We Don't Store

3Bfreeze is designed with a minimal-data philosophy. We explicitly do not collect or store:

• Social Security Numbers (SSN)
• Dates of birth
• Government-issued identification documents
• Credit bureau account credentials or PINs
• Credit reports, scores, or any credit data

Your interactions with credit bureau websites happen directly between you and the bureaus. 3Bfreeze guides you through the process but never acts as an intermediary for sensitive information.

Data Security

We implement industry-standard security measures to protect the limited data we hold. All data is encrypted in transit using TLS and encrypted at rest. Access to production systems is restricted and audited. We conduct regular security reviews and follow best practices for application security.

Your Rights

You have the right to access, export, and delete your personal data at any time. You can export all data associated with your account from your account settings. You can delete your account entirely, which permanently removes all of your data from our systems. If you need assistance exercising these rights, contact us at the address below.

Third-Party Service Providers

We run 3Bfreeze on infrastructure operated by other companies. Each one below acts as our service provider, processes data only on our instructions, and is contractually barred from using it for its own purposes. We do not use advertising networks, analytics trackers, or data brokers.

• Supabase (United States) hosts our database and authentication. It holds your account record, your freeze status per bureau, your reminders, and your activity history.
• Vercel (United States) hosts and serves the application, and processes request metadata including your IP address.
• Resend (United States) delivers our transactional email. It receives your email address and the message body.
• Sentry (United States) receives error reports, which can include your account id and the technical context of a failure.

None of these providers receives a Social Security number, a date of birth, or a bureau credential, because we never collect one.

How Long We Keep Your Data

We keep your account record and freeze history for as long as your account is open, because the point of the service is to tell you what you froze and when. Error diagnostics are kept for 90 days. When you delete your account, everything tied to it is erased immediately, and backups taken before the deletion roll off within 30 days. We keep no shadow copy and we do not retain your data to sell or license it.

Your State Privacy Rights

Residents of states with comprehensive privacy laws, including California, Colorado, Connecticut, Georgia, Texas, and Virginia, have a statutory right to know what we hold, to get a copy, to correct it, to delete it, and to appeal if we say no. The export and delete controls in your account settings satisfy the first three without waiting on us. For anything else, email us and we will respond within 45 days, or tell you if we need a further 45. If we deny a request you may appeal by replying to our decision, and we will answer the appeal within 60 days; if we deny the appeal you may complain to your state attorney general.

We have never sold personal information and we do not share it for cross-context behavioral advertising. There is nothing to opt out of. We honor a Global Privacy Control signal as a valid opt-out request regardless. We will never retaliate against you for exercising any of these rights.

Children's Privacy

3Bfreeze is a service for adults managing their own credit files. It is not directed to children under 13 and we do not knowingly collect personal information from them. You must be 18 or older to create an account. If we learn an account belongs to a child under 13, we delete it and its data. Parents or guardians who believe a child has created an account should email us at the address below.

Freezing a minor's credit file is a separate process handled directly with each bureau by the child's parent or guardian under the Fair Credit Reporting Act. 3Bfreeze does not collect any information about a minor in order to explain that process.

Contact Us

For questions about this Privacy Policy or to exercise your rights over your personal data, contact ColdCredit LLC at privacy@coldcredit.co.