Cookie choices

Essential browser storage keeps CVHarbor working. Cloudflare Web Analytics measures aggregate traffic without cookies. Optional product analytics is enabled only after consent, and Sentry supports scrubbed error diagnostics.

Your choices

Essential storage is always on because CVHarbor cannot work without it. Choose Essential only to refuse optional product analytics, or Accept all / Save choices to allow it. You can reopen the banner anytime via Manage cookie preferences.

Cookie and storage inventory

Name — where — lifetime — purpose: • cvharbor_session — HttpOnly cookie — 30 days — signed-in session. • cvharbor_csrf — cookie (readable by script) — 30 days — CSRF protection for signed-in actions. • cvharbor_oauth_state — HttpOnly cookie — 10 minutes — OAuth sign-in state. • cvh_email_code — HttpOnly cookie — 10 minutes — binds an email sign-in code to this browser. • cvharbor_visitor — HttpOnly cookie — 400 days — anonymous AI quota for signed-out use. • cvharbor_aid — HttpOnly cookie — 365 days — signed-out product feedback identity. • cvharbor-cookie-consent — localStorage — until cleared — remembers Essential only vs Accept all. • Draft and UI keys (for example cvharbor-resume-draft-*) — localStorage — until cleared — in-progress edits and UI state. Essential items above are required for the product to work. Optional product analytics runs only after Accept all / Save choices.

Essential storage

We use essential browser storage to keep you signed in, protect your account, and remember your choices. Security-related storage expires automatically, and signing out clears your active session.

Feedback

Feedback sent while signed out uses a random browser identifier so repeat feedback is not counted more than once. It is used only for feedback.

Cloudflare Web Analytics and Sentry

Cloudflare Web Analytics measures aggregate traffic and performance without cookies, localStorage, or individual fingerprinting. Optional product analytics is sent only after consent and contains coarse event categories, never CV text, job descriptions, emails, or user identifiers. Sentry browser error monitoring is scrubbed (no CV text, form values, media, request bodies, or user identity) and loads only after you allow optional analytics — choose Essential only to keep it off.

What we never do

We do not use advertising cookies, sell your data, or follow you across other websites.

Change your mind

Use Manage cookie preferences below whenever you want. You can also clear CVHarbor site data in your browser to remove saved choices.