Privacy Policy

Information You Provide to Us Directly – Generally

We collect information you provide directly to us in connection with your use of our Online Services. Generally, submitting personal information (name, address, telephone number, email address, employment, income, etc.) is voluntary and is not required to access information on our Online Services. You may choose to provide us with personal information – for example by completing a form or sending us an email. However, to access certain Online Services, and for us to be able to provide those Online Services to you, you may be required to provide personal information relevant to those Online Services, including registering for Applications and using online or mobile banking services.

We will use the information that you provide to respond to your messages, to help us get you the information you request, and to provide the services you request. We may share this information with certain third parties, but you can limit this sharing in certain instances as described in our Privacy Notice.

We may also disclose your personal information:

• To contractors, service providers, and other third parties we use to support our Online Services and who are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them.
• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our organization, our members, or others.

Information and Permissions - Applications

If you use one of our Applications, we will ask for permission to use the following features or functionalities:

• Camera - needed to take pictures of checks for mobile deposits.
• Photos/Images - needed if a user wants to make a mobile deposit and attach a photo or video to a secure message.
• Files/Media - needed if a user wants to attach a file to a secure message.
• Location - needed to use precise and approximate location for technology access and tracking.
• Other applications - needed to access other installed and relevant apps to determine if our Card Management app is downloaded when a user navigates to "Cards."
• SMS - needed for SMS banking, to send text notifications for activity, and to send multi-factor authentication codes.
• Application info and performance - needed to obtain crash logs, diagnostics, and other performance data.
• Device information - needed to understand the applicable operating system and version, device version, cellular/Wi-Fi connectivity, IP address, and location.
• Contact list – may request access to upload contact list from the device to link contacts to certain app functions.

In addition, we will collect specific personal information elements including name, email address, member number, account number, user ID, address, phone number, Social Security Number, and/or date of birth to provide services to you, including online and mobile banking services through our Website and Applications.

Cookies and Other Tracking Technologies

We also collect certain information automatically when you use our Online Services. APGFCU utilizes functional and analytical cookies to provide a better experience for our users, as outlined below. Please note some functionality of the website may be affected if you disable all cookies. Some of our forms, such as a newsletter sign-up, may use functional cookies to remember if you’ve already registered or to show certain notifications that may only be valid to members. When submitting data through a form, application or member account login, cookies may be set to remember your user information for future correspondence. Member account logins may also use cookies to remember your preferences.To opt-out of the use of cookies, you can disable them via your browser settings.

In addition, you may set preferences with certain specific services:

Google Analytics: Our Online Services use Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and which enable an analysis of your use of the Online Services. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On our behalf, Google will use this information for the purpose of evaluating your use of the Online Services, compile reports on Online Services activity and other information relating to website activity and internet use. For more information about Google Analytics, please visit www.google.com/policies/privacy/partners/. For more information on the types of cookies utilized by Google Analytics, please visit https://policies.google.com/technologies/cookies?hl=en-US. You can opt-out of Google’s collection and processing of data generated by your use of the Online Services by going to https://tools.google.com/dlpage/gaoptout. Note that Google’s opt-out mechanism is specific to Google activities and does not affect the activities of other ad networks or analytics providers that we may use.

Google Ads: We use the online advertising program Google Ads on our Online Services, through which we place advertisements on the Google search engine. When you access our Online Services via a Google ad, Google sets a cookie on your terminal device ("conversion cookie"). In the process, a different conversion cookie is assigned to each Google Ads customer, so that the cookies are not tracked across the websites of different Google Ads customers. The information obtained with the help of the cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our Google ads. However, we do not receive any information with which users can be personally identified. You can find Google's privacy policy here: https://policies.google.com/privacy?hl=en-US.

Meta Pixel (formerly known as Facebook Pixel): We use the "visitor action pixels" from Meta on our Services. This allows user behavior to be tracked after they have been redirected to our website by clicking on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. However, this data is stored and processed by Meta, which is why we are informing you, based on our knowledge of the situation. Meta may link this information to your Facebook account and also use it for its own promotional purposes, in accordance with Facebook's Data Usage Policy. You can allow Meta and its partners to place ads on and off Facebook. A cookie may also be stored on your computer for these purposes. You can object to the collection of your data by Meta pixel, or to the use of your data for the purpose of displaying Facebook ads in your account-settings. You can find Meta's privacy policy at https://www.facebook.com/privacy/policy/.

Marketo Munchkin: Our Online Services use a session cookie associated with the Adobe marketing service Marketo Munchkin, which is used to create profiles for users of the Online Services and to track their activity across the Online Services. Marketo Munchkin assigns a unique identifier to each visitor's browser, enabling the service to recognize repeat visits, associate browsing activity with a user record, and log page visits and link clicks for use in automated marketing campaigns. The cookies set by Marketo Munchkin are first-party cookies and are not shared with third parties. For more information about Marketo's privacy settings, including how to opt out of tracking, please visit https://experienceleague.adobe.com/en/docs/marketo/using/product-docs/administration/settings/understanding-privacy-settings.

WordCom Pixel: Our Online Services use a tracking pixel provided by WordCom, a small code snippet that assigns an anonymous cookie identifier to your browser when you visit the Online Services. The pixel collects limited information — including IP address, referring webpage, date and time, and domain type — and is used to support audience targeting, measure the effectiveness of our advertising campaigns, and exclude users who have already completed a relevant action from further campaign targeting.

Claritas AudienceAnywhere Tag: Our Online Services use an AudienceAnywhere Insights tag provided by Claritas, which executes on page load and sets a session cookie and a unique-visitor identifier used to distinguish unique visits and sessions on the Online Services. The tag collects technical information such as IP address, browser and device type, referring page, and the page on which the tag fired. Claritas uses this information to separate consumer and business traffic, estimate demographic characteristics, and resolve IP addresses to geographic areas at the household level for purposes of audience segmentation and analytics.

Online Advertising Networks: In the US, the opt-out pages offered by the Network Advertising Initiative and the DAA’s AboutAds program also offer a means to opt out of a number of advertising cookies. Please visit the Network Advertising Initiative and the DAA’s AboutAds program to learn more. Note that opting out does not mean you will no longer receive online advertising. It does mean that the company or companies from which you opted out will no longer deliver ads tailored to your web preferences and usage patterns. Opting out through the above methods will cause one or more opt-out cookies to be set on your browser or device, to indicate that you have opted out. Note that opt-outs are browser- and device-specific, so opting out on one browser will not affect a second browser or device that you use. For the same reason, if you buy a new device, change browsers or clear all cookies, you’ll need to perform this opt-out task again.

Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. Note, however, there is currently no industry consensus as to what site and app operations should do with regard to these signals. Accordingly, unless and until the law is interpreted to require us to do so, we do not monitor or take action with respect to “Do Not Track” signals. For more information on “Do Not Track,” visit https://www.allaboutdnt.com.

Opt-Out from sharing of your information

To learn how you can opt out of our sharing of information, please see our Privacy Notice. We are required by law to give you this Privacy Notice to explain how we collect, use and safeguard your personal financial information. If you have any questions, please contact a Member Services Representative at 410-272-4000.

APGFCU will never request sensitive account information through unsolicited phone calls or email messages. If you receive an unsolicited phone call or email message claiming to be from APGFCU or any other group requesting that you provide your account numbers, Social Security number, personal identification numbers (PINs), passwords, or other confidential information, do not divulge any information, do not click on any links, and report the suspected fraud to our Member Service Center at 410-272-4000.

Email

Email transmissions generally are not secure. APGFCU directs that you do not send or ask for sensitive information such as account numbers, passwords, financial information, etc. via any email system. Please contact APGFCU by telephone or in-person for these matters. Alternatively, if you are a user of APGFCU Online and Mobile Banking, you may use the secure mail service Message Center.

Security

The security of your personal information is important to us. We take reasonable measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Please understand, however, that no security system is impenetrable. Like other organizations, we cannot guarantee 100% the security or confidentiality of the information you provide to us. Consequently, while we endeavor to safeguard your personal information against unauthorized access and disclosure, we do not warrant or guarantee the absolute security of any personal information you transmit to, from or through our Online Services. If you share your computer or mobile device or use a computer that is accessed by the general public, remember to sign off and close your browser window when you have finished your session. Do not share your mobile device with other individuals. This will help to ensure that others cannot access your personally identifiable information. In the event of a breach of the confidentiality or security of any of your personally identifiable information, we will notify you as required by law, if reasonably possible and as reasonably necessary so that you can take appropriate protective steps. We may notify you under such circumstances using the telephone number or email address(es) we have on record for you or through alternative means, or as otherwise required by law. You should also take care with how you handle and disclose your personally identifiable information. Please refer to the Federal Trade Commission’s website for information about how to protect yourself against identity theft.

Governing Law

This Privacy Policy shall be governed by and construed in accordance with federal statutes and the laws of the State of Maryland. Our Online Services are not intended for distribution to, or use by, any person or entity in any jurisdiction or country where such distribution or use would be contrary to local law or regulation.

Children

We do not knowingly collect any personal information from children under the age of 13. We do not intend that our service or services be used by children. We request that children under the age of 13 not use or access any functionality of our Online Services or submit any personal information through the service. If we are advised in writing that we have inadvertently received or collected personal information from a child under 13 years of age, we will remove such information from our database. In connection with personal information from children please contact us at the information provided on our Contact Us page.

Last modified: April 14, 2026