Cookie Policy
Last updated:
This page covers this website. The mobile app does not use cookies at all — it stores your session token in the device keychain instead.
1. What we set
This site is deliberately light on tracking. It sets only what it needs to function:
| Cookie | Purpose | Duration |
|---|---|---|
cvmaker_session |
Keeps form submissions (support, account deletion) working and protects them against cross-site request forgery. | 2 hours |
XSRF-TOKEN |
The token that proves a form submission came from this site. | 2 hours |
Both are strictly necessary, which is why this site does not show a consent banner: under the ePrivacy rules, consent is required for cookies that are not essential, and we do not set any.
2. What we do not set
- No advertising or retargeting cookies.
- No third-party analytics on this website.
- No social media embeds that track you.
- No fonts loaded from a third party — they are served from this domain, so no request leaves the site when you load a page.
3. Analytics inside the app
The mobile app uses Firebase Analytics to count feature usage. That is described in the Privacy Policy and is unrelated to cookies on this website.
4. Controlling cookies
You can block cookies in your browser settings. If you block the two above, the support and account deletion forms will stop working — they cannot verify that a submission is genuine without them.