Cookie Policy
Cookies should be like good guests. Useful, polite, easy to send home. Here's every single one we set, what it does, and how to switch it off.
Last Updated: May 2026Honesty First
We won't pretend we use zero cookies. We set a handful, mostly for keeping you signed in, blocking bots, understanding how the site is used, and serving the ads that keep the builder free. Every one of them is listed below by name, provider, purpose, and expiry. Nothing hidden. Nothing creepy.
Overview
FreeCV.org uses three groups of cookies. Essential cookies keep you signed in and block bots. Analytics cookies tell us which pages people actually read. Advertising cookies serve the ads that pay for the free builder. That's the whole picture.
The short version: if you want to skip all the non-essential stuff, enable Global Privacy Control in your browser. We honor it automatically. No clicking through a consent maze, no dark patterns. Done.
Essential Cookies
These cookies are strictly necessary. Without them the site can't keep you signed in, can't tell humans from bots, and can't process a PRO purchase safely. EU law says you don't need to consent to these because the site literally won't work otherwise.
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
sb-*-auth-token | Supabase | Keeps you signed in to your dashboard, saves CVs, processes PRO purchases. | 1 hour (refreshes automatically) |
sb-*-refresh-token | Supabase | Refreshes your session in the background so you don't get logged out every hour. | 7 days |
__cf_bm | Cloudflare | Bot management. Detects automated traffic before it hits the builder. | 30 minutes |
cf_clearance | Cloudflare | Confirms you passed a security challenge, so you're not asked again immediately. | 30 minutes to 1 year (depends on threat level) |
Analytics Cookies
We use Google Analytics 4 to count pageviews and figure out which templates and CV examples are actually useful. We don't see your name, email, CV content, or anything personally identifying. We see numbers like "300 people read the cover-letter guide today" and "Toronto template gets more downloads than Modern". That's it.
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
_ga | Google Analytics 4 | Assigns a random anonymous ID so we can tell repeat visits from new ones, without knowing who you are. | 2 years |
_ga_VQ6WJEFF8F | Google Analytics 4 | Property-specific session counter for freecv.org. | 2 years |
_gid | Google Analytics 4 | Daily user counter. Refreshes every 24 hours. | 24 hours |
You can opt out of Google Analytics globally with the official Google Analytics opt-out browser add-on, or just block these cookies in your browser settings.
Advertising Cookies
FreeCV stays free because Google AdSense serves ads to logged-out visitors on most pages. AdSense sets cookies so the same person doesn't see the same ad fifty times in a row, and so advertisers can measure whether a click turned into anything useful. The cookies don't see your CV content because we don't expose it to them. They see the page URL, your IP, and a Google-assigned identifier.
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
__gads | Google AdSense | Measures ad impressions and frequency caps so you don't see duplicates. | 13 months |
__gpi | Google AdSense | Stores your ad personalization choice, if you've set one in Google's My Ad Center. | 13 months |
IDE | Google DoubleClick | Used by advertisers to measure whether their ad led to a real action. | 13 months |
NID | Stores ad preferences and language settings tied to your Google account if you have one. | 6 months | |
ANID | Used by Google to deliver, measure, and personalize ads across the web. | 13 months |
California residents and CPRA "sharing"
Because AdSense uses these cookies for what California's CPRA calls "cross-context behavioral advertising", you have the right to opt out. Visit our Your Privacy Choices page, or enable Global Privacy Control in your browser. We honor both automatically.
Local Storage (Not a Cookie, but You Should Know)
Your CV draft lives in your browser's local storage under the key freecv-builder-v3. Local storage is not a cookie. It's a bigger sibling that stays on your device and never gets attached to network requests automatically. We use it so you can close the tab, come back tomorrow, and pick up exactly where you left off without an account.
- Your CV data is saved to your own device only
- It is not sent to our servers unless you sign in and choose to save online
- Clearing your browser data wipes it. Make sure to download the PDF first
- Different browsers and different devices keep separate copies
If you want to start fresh, click "Reset" in the builder, or clear your browser storage for freecv.org. Either works.
How to Manage Cookies
You don't need our permission to control your cookies. Pick whichever method matches the level of effort you feel like making.
The 10-second method
Enable Global Privacy Control in your browser. It's a single setting that broadcasts an opt-out signal to every site you visit. We honor it automatically. Brave and Firefox have it built in. Chrome and Edge need a small extension like Privacy Badger or DuckDuckGo Privacy Essentials.
The per-browser method
The Google-specific method
Visit Google's My Ad Center to turn off personalized ads across the entire Google ecosystem. This affects every site that uses AdSense, not just FreeCV.
Consent & Your Rights
If you're in the EU, EEA, UK, or Switzerland, GDPR and the ePrivacy Directive give you the right to refuse non-essential cookies before they're set. If you're in California, the CCPA and CPRA give you the right to opt out of "sale" or "sharing" of your personal info, which in our case means the AdSense cookies above.
About our consent banner
FreeCV does not currently show a cookie consent banner. Where required by law, we only set non-essential cookies after a valid opt-in or where another legal basis applies. We're working on a proper consent management platform. Until it ships, your browser controls and Global Privacy Control are the cleanest way to control what gets set. The essential cookies (Supabase, Cloudflare) load either way because the site needs them to function.
For your full data rights including access, deletion, and portability, see the GDPR Rights section of our Privacy Policy. For California-specific rights and the opt-out form, visit Your Privacy Choices.
Changes to This Policy
We update this page when we add or remove a cookie, when a third-party service changes its names, or when the law changes. The "Last Updated" date at the top tells you when the current version was published. Big changes get a banner on the homepage for a couple of weeks so nobody misses them.
Contact Us
Questions about cookies, requests to exercise your rights, or just want to flag something we got wrong? Reach us at info@freecv.org or via the contact page.
Direct line
For cookie-specific questions, put "Cookies" in the subject. We answer within 5 business days, usually faster.