Last updated: October 7, 2026
1. Overview
Cookies are small text files a website stores in your browser. Similar technologies such as localStorage and sessionStorage store data in your browser without sending it to the server with every request. By default we use only storage that is strictly necessary for the Service you request. Analytics runs only with your consent. Your resume content is never placed in a cookie and never shared with advertising partners.
Change your choice at any time
The same link is in the footer of every page.
2. Strictly necessary (no consent required)
These are required to provide features you explicitly use or to remember your privacy choice. They cannot be switched off in the banner.
Cookies
| Name | Type | Purpose | Duration |
|---|---|---|---|
NEXT_LOCALE | Cookie | Remembers the site language | 1 year |
next-auth.session-token | Cookie (encrypted, httpOnly) | Keeps you signed in with Google for the optional Drive backup; contains your name, email, profile picture and Google access tokens | Up to 30 days, only after sign-in |
next-auth.csrf-token | Cookie | Protects the sign-in process against forged requests | Browser session, only when signing in |
next-auth.callback-url | Cookie | Returns you to the right page after sign-in | Browser session, only when signing in |
On HTTPS the sign-in cookie names carry the prefix __Secure- or __Host-. Site administrators additionally receive a session cookie when they log in to the admin area.
Browser storage (localStorage / sessionStorage)
| Name | Type | Purpose | Duration |
|---|---|---|---|
resume-storage | localStorage | Your resumes (all content you enter) | Until you delete it |
cover-letter-storage | localStorage | Your cover letters | Until you delete it |
cvh-consent | localStorage | Your cookie choice (analytics and ads, with date) | Until you change or delete it |
theme | localStorage | Light or dark mode | Until you delete it |
cvolustur_auto_sync_enabled | localStorage | Whether automatic Drive backup is on | Until you delete it |
cv-onboarding-dismissed, cvh-backup-hint-step1, cvhazirla_legacy_drive_offered | localStorage | Remembers which hints you have already seen | Until you delete it |
cvh-download-gate-skip, cvh-download-gate-shown | sessionStorage | Remembers the backup reminder before a download | Until the tab is closed |
Anonymous counters
| Name | Type | Purpose | Duration |
|---|---|---|---|
visit-day, builder-day, pdf-day | localStorage | Date of the last count, so the same visit is not counted twice on one day. Contains only a date. | Overwritten daily, until you delete it |
visit-tab | sessionStorage | Random tab ID for the anonymous "currently online" count | Until the tab is closed |
3. Analytics (only with consent)
If you allow analytics, Google Analytics 4 is loaded and sets cookies such as _ga and _ga_<ID> (by default up to 2 years) to distinguish visits and measure page views. Without consent the script is not loaded. Provider: Google Ireland Limited. Legal basis: Art. 6(1)(a) GDPR and, where applicable, national rules on storing information on devices (such as Art. 5(3) of the ePrivacy Directive).
4. Advertising (content pages only)
When the operator enables ads, Google AdSense may show ads on content pages (resume examples, guides, blog). There are no ads on the home page, in the resume builder, templates, download steps or legal pages. The cookies are set by Google (for example __gads, __gpi or cookies on doubleclick.net); names and durations are determined by Google.
- Without consent: we signal "denied" for ad storage and personalization via Google Consent Mode v2 and ads are requested as non-personalized. Google may still use limited cookies or data for fraud prevention and frequency capping.
- With consent: Google may use cookies to personalize ads based on your interests.
More: how Google uses cookies in advertising. You can also turn off personalized ads in Google's ad settings.
5. Google sign-in
When you sign in with Google, Google sets its own cookies on its domains. They are governed by Google's cookie policy.
6. What we do not use
- Analytics without consent
- Social media tracking pixels (such as the Facebook Pixel)
- Resume content for advertising, or any ad script in the resume builder
7. Managing cookies and storage
Use the cookie preferences link above to give or withdraw consent; the page reloads and Google Analytics is no longer loaded. You can also delete cookies and site data in your browser settings. Note that clearing site data permanently deletes the resumes stored in that browser - download them or back them up to Google Drive first.
8. More information
See our Privacy Policy for details on processing and your rights. Questions: [email protected]