Cookie Policy

Last updated: April 8, 2026

1. What Are Cookies

Cookies are small text files placed on your device when you visit a website. We also use similar technologies such as browser localStorage and sessionStorage, and (on our mobile builds) secure native storage. Together, these help us keep you signed in, remember your preferences, secure the Service, and understand how it is used.

First-party technologies are set by ResumeFry itself and are used only by us. Third-party technologies are set by other companies whose services we use (such as analytics or fonts); these third parties may receive your IP address and device information when they load.

2. Cookies & Technologies We Use

Essential (Always active)

Required for the Service to function. These are first-party and cannot be disabled while you use ResumeFry.

Technology	Purpose	Duration
app_access_token (localStorage)	Maintains your login session	15 minutes
app_refresh_token (localStorage)	Keeps you signed in across visits	90 days
app_user (localStorage)	Caches your account summary (id, email, tier, credits) for fast loading	Until logout
resumefry_pending_jd (localStorage)	Temporarily holds a job description you pasted before signing in, so it can be processed after login	Until processed or cleared
resumefry_pending_resume_text (localStorage)	Temporarily holds resume text you pasted before signing in, so it can be processed after login	Until processed or cleared
analytics_session_id (sessionStorage)	Anonymous session identifier used to group page-visit events from the same browser tab	Browser tab
pv_* (sessionStorage)	De-duplicates repeated page-view tracking within the same browser tab	Browser tab
cc_consent (localStorage)	Remembers your cookie preferences. Set by the Zenixr CookieConsent script.	6 months (180 days)

Analytics (Requires your consent)

Help us understand how visitors use ResumeFry so we can improve the experience. These are only activated if you accept analytics in the cookie banner. PostHog also automatically suppresses itself if your browser sends a "Do Not Track" signal.

Technology	Purpose	Provider / Region
PostHog (localStorage)	Product analytics, autocapture of clicks and pageviews, and session replay. Session replays capture the visible page including text content and form input. Once you are signed in, PostHog also receives your user id, email, subscription tier, status, and credit balances.	PostHog Inc. (USA)
Firebase Analytics	Event logging and screen tracking on native mobile builds. Once you are signed in, Firebase Analytics receives your user id, email, and subscription tier.	Google LLC (USA)
Page visit tracking	Pages visited, referrer, UTM parameters, device type and details, and a hashed (SHA-256) IP address.	ResumeFry (first-party, EU servers)

3. The Cookie Banner and Your Choices

ResumeFry uses a cookie consent banner provided by Zenixr CookieConsent. The banner offers four standard categories:

Essential — always on. Required for the Service to work; cannot be disabled.
Analytics — optional. Enables PostHog and our first-party page-visit logging. ResumeFry does use analytics when you consent.
Marketing — optional. The banner shows this category for completeness, but the ResumeFry website does not use any marketing or advertising cookies, so toggling it does not load anything. (Advertising appears only in the free tier of the mobile apps; see the Mobile App section below.)
Functional — optional. Reserved for future preference features. ResumeFry does not currently use any functional cookies.

You can change your cookie preferences at any time by clicking the button below. You can also control cookies through your browser settings.

Note: Blocking essential technologies may prevent the Service from functioning properly.

4. Third-Party Services

When you accept analytics, data may be sent to the following third-party services:

PostHog — product analytics and session replay. Data is processed in the United States. Privacy Policy
Firebase Analytics (Google) — event logging and screen tracking on native mobile builds. Privacy Policy

The following third-party services are loaded as part of the normal operation of the Service, regardless of your analytics choice. They may receive your IP address and User-Agent when their resources are loaded:

Zenixr CookieConsent — the cookie banner script. Receives your IP and country to determine which consent flow to show, and stores a record of your consent choices.
Google Fonts — delivers the typefaces used on our website. Privacy Policy
Stripe — payment processing on our checkout and billing-portal pages, when you subscribe or buy credits. Privacy Policy
Cloudflare R2 — object storage for any resume files you upload, plus the optimized resume files we generate. Privacy Policy
Firebase Authentication — verifies Google sign-in tokens when you sign in with Google. Privacy Policy

No advertising on the web. This website does not use advertising cookies and we do not engage in cross-context behavioral advertising or "sale" of personal information (as defined by US state privacy laws) through the website. The ResumeFry iOS and Android apps display banner ads through Google AdMob on the free tier only — see the Mobile App section below and our Privacy Policy for details.

5. Mobile App — No Cookies, In-App Consent

The ResumeFry iOS and Android apps do not use HTTP cookies. Instead, they use secure on-device storage (Capacitor Preferences) to remember your login session and your privacy choices. The web cookie banner is not shown in the mobile app.

In-app Privacy choices. On first launch the mobile app shows a "Privacy choices" screen with separate toggles for Analytics and Personalized ads. You can reopen it at any time from the in-app menu → Privacy choices.

Analytics on mobile. If you grant analytics consent we enable Firebase Analytics and PostHog (configured in reduced mode: autocapture and session replay are disabled on native). If you decline, neither SDK transmits any data.

Ads on mobile. The free tier shows banner ads served by Google AdMob. AdMob may receive your advertising identifier (IDFA on iOS, Android Advertising ID on Android) subject to the OS-level controls below.

iOS — after you grant consent we trigger Apple's App Tracking Transparency prompt. If you choose Ask App Not to Track, AdMob serves non-personalized ads and your IDFA is not shared. You can change this in Settings → Privacy & Security → Tracking → ResumeFry.
EEA / UK / Switzerland — we also show Google's User Messaging Platform (UMP) consent form on first launch, letting you allow or deny specific ad partners under the IAB Transparency & Consent Framework. Your TCF choice is stored on-device.
App-level personalized-ads toggle — if you turn off "Personalized ads" in our Privacy choices screen, we pass the non-personalized ads flag to AdMob regardless of ATT/UMP state, and you only see contextual ads.
Android — manage or reset your Advertising ID from Settings → Google → Ads.
Pro subscribers — no ads are shown.

6. Other Tracking Technologies

Beyond cookies and localStorage, websites can use other tracking technologies such as web beacons, tracking pixels, and Flash cookies. ResumeFry does not use web beacons, tracking pixels, or Flash cookies. Some of our analytics sub-processors (e.g., PostHog) may use similar technologies as part of their SDK; these are only activated if you consent to analytics.

7. Browser and Device Controls

Most browsers let you view, manage, block, or delete cookies and local storage through their settings. The exact steps depend on the browser you use:

Do Not Track. Some browsers offer a "Do Not Track" (DNT) signal. There is no industry-standard way to interpret DNT, so our first-party page-visit logging does not currently respond to it. However, our analytics provider PostHog is configured to respect DNT, which means PostHog and its session replay are automatically suppressed when your browser sends a DNT signal. You can manage all optional analytics through our cookie banner and the browser controls above.

8. Hosting & Data Location

ResumeFry is hosted on servers operated by Hetzner Online GmbH in the European Union, and uploaded resume files are stored in Cloudflare R2. Any data stored via cookies, localStorage, or transmitted while you use the Service is processed on this infrastructure under EU GDPR safeguards.

9. Updates to This Policy

We may update this Cookie Policy from time to time to reflect changes to the technologies we use or for legal, regulatory, or operational reasons. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to revisit this page periodically.

10. Contact

For questions about our use of cookies, contact us at [email protected].