Cookie Policy
Last updated: 8 November 2026
Quick summary
- • We set the sign-in cookies, which are strictly necessary, and one preference cookie for the app's sidebar, only when you toggle it.
- • Analytics is cookieless. It stores nothing on your device, so there is no cookie banner to accept.
- • We use no advertising or retargeting cookies.
Cookies are small files that a website stores on your device. This page lists the ones ConsultCV sets, and the browser storage the app uses to work. For how we handle personal data in general, read the Privacy Policy.
Cookies we set
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| ConsultCV.session_token, ConsultCV.session_data | Keep you signed in. Without them you cannot use your account. session_data is a short-lived copy of your session, so pages load without asking the database each time. Over HTTPS (the live site) their names start with __Secure-, as in __Secure-ConsultCV.session_token, which the browser sends only over an encrypted connection. | session_token up to 7 days, renewed while you use the app; session_data 5 minutes | Strictly necessary |
| ConsultCV.state | Protects a Sign in with Google while it is under way, so nobody can finish it in your place. | Set when you start a Google sign-in and deleted when it completes | Strictly necessary |
| rf-sidebar-collapsed | Remembers whether you collapsed the app's sidebar. Set only when you toggle it. | 1 year | Preference you set |
Analytics without cookies
Analytics is cookieless. We count how the service is used in our own database, and our host counts page views with Vercel Web Analytics. We use no other analytics or tracking service. Neither writes a cookie, local storage or session storage on your device. Our event log uses a random visit identifier that the open page holds in memory only; it disappears when you reload or close the page, so we cannot recognise you across visits before you sign in.
Browser storage the app needs
A few features keep a small value in your browser's own storage. Each is needed for something you asked the app to do, none is used for analytics, and none is sent to us on its own. Some things are kept only in the open page's memory and never stored on your device, such as whether you already downloaded the trial's free PDF: they are gone when you reload or close the page.
ccv:trial:v1(local storage): Your /try trial (CV draft, request, result and brand), so a reload does not lose it. Removed when you import it into a workspace, or when you clear it.rf:auth-email(session storage): The email you typed, carried from one sign-in page to the next instead of in the address. Gone when the tab closes.rf:verify-resend-until(session storage): When you may ask for another verification email. Gone when the tab closes.rf:email-verify-pending(local storage): That a verification email is on its way, so the app can confirm when you click it. Removed when your email is confirmed.theme(local storage): Light or dark. Written only by the theme switch in our own admin pages, which only our staff can open; the app you use is always light.
Payment
Checkout and the billing portal are pages hosted by Stripe. Stripe may set its own cookies there, for example for fraud prevention. They are governed by Stripe's privacy policy, not set by ConsultCV.
Managing cookies
You can refuse or delete cookies and site data in your browser settings. If you block the sign-in cookies, you cannot stay signed in.
Contact
Questions about cookies: support@consultcv.com.