Cookie Policy
Last updated: April 8, 2026
1. What Are Cookies
Cookies are small text files placed on your device when you visit a website. We also use similar technologies such as browser localStorage and sessionStorage. Together, these help us keep you signed in, remember your preferences, secure the Service, and understand how it is used.
First-party technologies are set by ResumeFry itself and are used only by us. Third-party technologies are set by other companies whose services we use (such as analytics or fonts); these third parties may receive your IP address and device information when they load.
2. Cookies & Technologies We Use
Essential (Always active)
Required for the Service to function. These are first-party and cannot be disabled while you use ResumeFry.
| Technology | Purpose | Duration |
|---|---|---|
| app_access_token (localStorage) | Maintains your login session | 15 minutes |
| app_refresh_token (localStorage) | Keeps you signed in across visits | 90 days |
| app_user (localStorage) | Caches your account summary (id, email, tier, credits) for fast loading | Until logout |
| resumefry_pending_jd (localStorage) | Temporarily holds a job description you pasted before signing in, so it can be processed after login | Until processed or cleared |
| resumefry_pending_resume_text (localStorage) | Temporarily holds resume text you pasted before signing in, so it can be processed after login | Until processed or cleared |
| analytics_session_id (sessionStorage) | Anonymous session identifier used to group page-visit events from the same browser tab | Browser tab |
| pv_* (sessionStorage) | De-duplicates repeated page-view tracking within the same browser tab | Browser tab |
| cc_consent (localStorage) | Remembers your cookie preferences. Set by the Zenixr CookieConsent script. | 6 months (180 days) |
Analytics (Requires your consent)
Help us understand how visitors use ResumeFry so we can improve the experience. These are only activated if you accept analytics in the cookie banner. PostHog also automatically suppresses itself if your browser sends a "Do Not Track" signal.
| Technology | Purpose | Provider / Region |
|---|---|---|
| PostHog (localStorage) | Product analytics, autocapture of clicks and pageviews, and session replay. Session replays capture the visible page including text content and form input. Once you are signed in, PostHog also receives your user id, email, subscription tier, status, and credit balances. | PostHog Inc. (USA) |
| Page visit tracking | Pages visited, referrer, UTM parameters, device type and details, and a hashed (SHA-256) IP address. | ResumeFry (first-party, EU servers) |
3. The Cookie Banner and Your Choices
ResumeFry uses a cookie consent banner provided by Zenixr CookieConsent. The banner offers four standard categories:
- Essential — always on. Required for the Service to work; cannot be disabled.
- Analytics — optional. Enables PostHog and our first-party page-visit logging. ResumeFry does use analytics when you consent.
- Marketing — optional. The banner shows this category for completeness, but ResumeFry does not currently use any marketing or advertising technologies, so toggling it does not load anything.
- Functional — optional. Reserved for future preference features. ResumeFry does not currently use any functional cookies.
You can change your cookie preferences at any time by clicking the button below. You can also control cookies through your browser settings.
Note: Blocking essential technologies may prevent the Service from functioning properly.
4. Third-Party Services
When you accept analytics, data may be sent to the following third-party service:
- PostHog — product analytics and session replay. Data is processed in the United States. Privacy Policy
The following third-party services are loaded as part of the normal operation of the Service, regardless of your analytics choice. They may receive your IP address and User-Agent when their resources are loaded:
- Zenixr CookieConsent — the cookie banner script. Receives your IP and country to determine which consent flow to show, and stores a record of your consent choices.
- Google Fonts — delivers the typefaces used on our website. Privacy Policy
- Stripe — payment processing on our checkout and billing-portal pages, when you subscribe or buy credits. Privacy Policy
- Cloudflare R2 — object storage for any resume files you upload, plus the optimized resume files we generate. Privacy Policy
- Firebase Authentication — verifies Google sign-in tokens when you sign in with Google. Privacy Policy
No advertising. We do not use advertising cookies, do not run ads on ResumeFry, do not share personal data with advertisers, and do not engage in cross-context behavioral advertising or "sale" of personal information as defined by US state privacy laws.
5. Other Tracking Technologies
Beyond cookies and localStorage, websites can use other tracking technologies such as web beacons, tracking pixels, and Flash cookies. ResumeFry does not use web beacons, tracking pixels, or Flash cookies. Some of our analytics sub-processors (e.g., PostHog) may use similar technologies as part of their SDK; these are only activated if you consent to analytics.
6. Browser and Device Controls
Most browsers let you view, manage, block, or delete cookies and local storage through their settings. The exact steps depend on the browser you use:
Do Not Track. Some browsers offer a "Do Not Track" (DNT) signal. There is no industry-standard way to interpret DNT, so our first-party page-visit logging does not currently respond to it. However, our analytics provider PostHog is configured to respect DNT, which means PostHog and its session replay are automatically suppressed when your browser sends a DNT signal. You can manage all optional analytics through our cookie banner and the browser controls above.
7. Hosting & Data Location
ResumeFry is hosted on servers operated by Hetzner Online GmbH in the European Union, and uploaded resume files are stored in Cloudflare R2. Any data stored via cookies, localStorage, or transmitted while you use the Service is processed on this infrastructure under EU GDPR safeguards.
8. Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes to the technologies we use or for legal, regulatory, or operational reasons. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to revisit this page periodically.
9. Contact
For questions about our use of cookies, contact us at [email protected].