If the grocery store is selling your data (and they are) and meta has a connecting card number ads could be targeted.

> credit card itself can’t be used to ad targeting

Incorrect.

Credit card networks / issuers explicitly describe using payment, spending, and your personal data,

for marketing, personalization, audience segmentation, and advertising.

Mastercard’s privacy notice states that it may use personal and transaction-related information to: “Provide you with personalized services and recommendations” “Offer and support loyalty programs” “Provide content and advertising tailored to your individual interests” “Analyze spending behavior to improve the effectiveness of marketing programs and advertising.”

Visa has also historically offered an opt-out specifically for using card transaction data…