Cookie choices

Essential browser storage keeps sign-in and workspace preferences working. Optional analytics stays off until you choose it.

What the law requires us to ask

Essential cookies are set without asking, because the service cannot work without them and German and EU law does not require consent for that. Everything else — analytics — is off until you say yes, and stays off if you never answer. Your choice is stored so we do not ask again.

Essential storage, and how long it lasts

cvharbor_session keeps you signed in and lasts 30 days, or one hour for an admin session. cvharbor_csrf pairs with it to stop another site submitting forms as you, and expires with it. cvh_magic ties a sign-in link to the browser that requested it and lasts 15 minutes. A short-lived cookie also records the state of an OAuth sign-in while it is in progress. Your cookie choice itself is stored so the banner does not return on every visit. Signing out clears the session and CSRF cookies immediately.

Feedback identifier

Sending feedback while signed out sets a first-party cookie holding a random identifier, so repeat feedback from the same browser is not counted as several different people. It is used only for feedback, is never shared or used for advertising, and clearing your cookies removes it.

Optional analytics

PostHog is loaded only after consent. Autocapture and automatic pageview capture are disabled; CVHarbor sends selected product events without resume content. We use it to see which features are used and where people get stuck — never to profile you, and never for advertising. PostHog acts as our processor and does not sell the data.

What we never do

No advertising cookies, no third-party trackers, no sharing with data brokers, and no selling of anything we hold. Nothing here follows you to other websites.

Your rights

You can withdraw analytics consent at any time using the control below — it takes effect immediately and resets the analytics identity. Clearing your browser cookies removes everything on this page. Under the GDPR you can also ask what we hold, ask for a copy, ask us to correct it, or ask us to delete it: write to [email protected]. You can complain to a supervisory authority if you are not satisfied with our answer.

Change your mind

Use Manage cookie preferences below at any time. Turning analytics off stops capture and resets the analytics identity.