Legal Document

Cookie Policy

📅 Effective: April 3, 2026🔄 Last Updated: April 3, 2026🌐 claricv.vercel.app
ℹ About This PolicyThis Cookie Policy explains what cookies and similar technologies ClariCV uses, why we use them, and how you can control them. It should be read alongside our Privacy Policy and Terms of Service. Essential cookies are set automatically as they are strictly necessary to deliver the Service. Non-essential cookies (analytics) are only active when you have not signalled a preference to opt out — see Section 7 for how to control your preferences.
1

What Are Cookies?

Cookies are small text files that are placed on your device (computer, tablet, or phone) when you visit a website. They allow the website to recognise your device and remember certain information about your visit — such as whether you are logged in, your preferences, and how you interact with the platform.

In addition to traditional cookies, websites may also use similar technologies such as:

  • Local storage — browser-side storage used to persist settings (e.g., builder state) without sending data to a server on every request;
  • Session storage — temporary browser-side storage cleared when you close your browser tab;
  • HTTP-only cookies — server-set cookies inaccessible to JavaScript, used for secure authentication.
2

How We Use Cookies

ClariCV uses a minimal, purposeful set of cookies and browser storage. We do not use cookies for advertising, user profiling, or cross-site tracking. Our use of cookies falls into three categories: Essential, Analytics & Performance, and Third-Party.

Minimal Cookie Footprint
ClariCV is designed with privacy in mind. We use only the cookies necessary to make the platform function securely and reliably. We do not use advertising cookies, third-party tracking pixels, or behavioural profiling cookies.
3

Essential Cookies (Required)

These cookies are strictly necessary for the platform to function. They cannot be disabled without breaking core features such as sign-in and account access. No consent is required for essential cookies under most privacy regulations, as they are necessary for the delivery of a service you have explicitly requested.

Cookie / Storage KeyProviderPurposeDuration
sb-*-auth-tokenSupabaseStores your authentication session token to keep you signed in across page loads and browser refreshes.Session / 1 week
sb-*-auth-token-code-verifierSupabasePKCE code verifier used during the OAuth sign-in flow to prevent interception attacks.Session
__Secure-next-auth.session-tokenNext.js / VercelSession management for server-side authentication. HTTP-only, Secure flag set.Session
claricv-cv-builder-stateClariCV (localStorage)Temporarily stores unsaved CV builder state in your browser to prevent data loss on accidental navigation.Session / cleared on save
claricv-jd-suggested-cvClariCV (sessionStorage)Passes the JD Matcher suggested CV into the Builder tab. Cleared when the browser tab is closed.Session tab only
4

Analytics & Performance Cookies

ClariCV uses Vercel Analytics — a privacy-first, cookieless analytics tool — to understand aggregate page performance and identify errors. It does not set cookies, does not track individual users, and does not collect personally identifiable information.

ToolPurposePersonal Data
Vercel AnalyticsAggregate page view counts and Core Web Vitals performance metricsNo cookies set; no personally identifiable data; no cross-site tracking. Operates under Vercel's Privacy Policy.
Server error logsCapture API errors and performance issues for debuggingIP address (anonymised where possible); retained ≤ 90 days
Cookieless Analytics — No Consent Banner Required
Vercel Analytics does not set any cookies and does not track individual users. Because it collects no personal data and sets no cookies, it does not require a consent banner under GDPR, PECR, or similar regulations. You can opt out at any time by enabling a Do Not Track (DNT) signal in your browser — see Section 8 for instructions.
5

Third-Party Cookies

When you use certain features on ClariCV, third-party services may set their own cookies or access technologies on your device. ClariCV has limited control over these cookies, which are governed by each provider's own cookie and privacy policies.

ProviderWhen ActiveCookie Policy
Google (OAuth sign-in)When you sign in using “Continue with Google”Google Cookie Policy
SupabaseAll authenticated sessions — authentication infrastructure providerSupabase Privacy Policy
VercelAll page loads — hosting infrastructure providerVercel Cookie Policy

Note: Third-Party AI Providers (Google Gemini, OpenAI, OpenRouter) receive your data via server-side API calls — they do not set cookies in your browser directly. See our Privacy Policy §5 for details on AI data transmission.

6

Cookies We Do NOT Use

No Advertising or Tracking Cookies
ClariCV does not use and does not permit the following types of cookies or trackers:
  • Advertising cookies — we run no ad networks, retargeting pixels, or programmatic advertising;
  • Cross-site tracking cookies — we do not track your browsing activity outside of ClariCV;
  • Social media tracking pixels — no Facebook Pixel, Twitter/X Pixel, LinkedIn Insight Tag, or similar;
  • Fingerprinting or device tracking — we do not use canvas fingerprinting or other covert identification technologies;
  • Third-party analytics with user profiling — we do not use Google Analytics, Hotjar, Mixpanel, or similar tools that build per-user behavioural profiles.
7

Your Consent & Preferences

Under GDPR, PECR (UK), and similar privacy regulations, explicit opt-in consent is required before setting non-essential cookies (such as analytics or tracking). ClariCV's approach to consent is as follows:

Essential Cookies — No Consent Required

Essential cookies (authentication sessions, PKCE verifier, builder state) are set automatically because they are strictly necessary to deliver the Service you requested. Under Reg. 6(4) of PECR and equivalent laws, consent is not required for cookies “strictly necessary” to provide a service explicitly requested by the user.

Analytics — Cookieless, Legitimate Interest

Vercel Analytics does not set any cookies and does not collect personal data. Because no cookie is placed and no personal data is processed, no consent banner is required. We rely on legitimate interests (platform stability and performance monitoring) as the legal basis. You can opt out via the Do Not Track browser setting (Section 8).

Advertising Cookies — Not Used

ClariCV does not use any advertising, tracking, or profiling cookies. No consent is requested for these because they are not used. See Section 6 for the full list of cookie types we explicitly do not use.

Future Changes
If ClariCV introduces any cookies that require explicit consent in the future (e.g., optional analytics with personal data), we will implement a proper cookie consent banner that fires before those cookies are set, in accordance with GDPR Article 7 and PECR requirements. This policy will be updated accordingly.
8

How to Control Cookies

You have several options for controlling cookies. Please note that disabling essential cookies will prevent you from signing in or using authenticated features of ClariCV.

8.1 Browser Settings

Most browsers allow you to view, manage, block, and delete cookies. The following links provide instructions for popular browsers:

8.2 Clearing Local Storage

ClariCV uses browser localStorage to store temporary CV builder state. To clear this data, open your browser's Developer Tools (F12), navigate to Application → Storage → Local Storage, and delete entries prefixed with claricv-.

8.3 Opt Out of Analytics (Do Not Track)

Vercel Analytics respects the DNT (Do Not Track) browser signal. Enable DNT in your browser settings or install a browser extension that sends the DNT header, and Vercel Analytics will not record your page views. You can also disable JavaScript for the platform to prevent analytics entirely.

Impact of Disabling Essential Cookies
Blocking or deleting authentication cookies (those prefixed sb-*) will sign you out and prevent you from accessing your account. You can still view public pages, but you will not be able to use any authenticated feature of ClariCV without these cookies.
9

Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. When we make material changes, we will update the “Last Updated” date above. Continued use of ClariCV is subject to the updated policy; where consent is legally required for any new non-essential cookie or tracker, we will request explicit consent before activation.

The current version of this policy is always available at claricv.vercel.app/cookies.

10

Contact Us

If you have any questions about our use of cookies or this policy, please contact us:

We aim to respond to cookie-related enquiries within 10 business days.

© 2026 ClariCV. All rights reserved.
This document was last updated on April 3, 2026.
By continuing to use ClariCV, you acknowledge that you have read and understood this document.