A plain-language account of the cookies and local storage this site uses, and the choices you have.
What are cookies?
Cookies are small text files placed on your device by websites you visit. They help sites remember your preferences, understand how you use the site, and deliver a better experience.
How we use cookies
We use three categories of cookies:
| Category | What it does | Control |
|---|
| Essential | Required for the service to function, including authentication (Firebase) during the sign-in redirect. | Always on |
| Security | Set by Cloudflare, our content-delivery and security provider, to tell real visitors apart from bots and abusive traffic. | Always on |
| Analytics | Helps us understand how people use both this marketing site and the Resumae app, via Google Analytics and Microsoft Clarity, and measures our advertising through the Meta and TikTok pixels. Only loaded if you accept analytics. | Your choice |
Essential and security cookies cannot be disabled - without them we cannot sign you in or keep the service available. Analytics cookies are set only if you accept analytics.
Local storage
We also use browser local storage (not cookies) for essential and functional features:
- Sign-in session: Firebase stores authentication tokens in local storage so you stay signed in across visits.
- Analytics preference (
resumae.cookieConsent): remembers whether you accepted or declined analytics. - Theme (
resumae-theme): saves your light or dark mode choice. Use the theme toggle in the site footer on the marketing site, or in account settings in the app. - Drafts and autosave: temporary copies of resume builder and interview-prep work in progress. These are functional only and are not used for tracking.
Third-party cookies
These are the third-party cookies our sites set:
- Cloudflare (
cf_clearance): set on both resumae.xyz and app.resumae.xyz after your browser passes a Cloudflare bot check. It lasts about 12 months and is a security measure rather than analytics. How often it is set depends on Cloudflare's bot-protection settings, which we cannot observe from the site itself. - Firebase (Google): during email, password, or Google sign-in.
- Google Analytics: usage statistics on this marketing site and inside the Resumae app, and only if you accept analytics.
- Microsoft Clarity (
_clck, _clsk): session recordings and heatmaps on this marketing site, and only if you accept analytics. - Google Tag Manager: loads and configures the marketing-site analytics tags described above, and only if you accept analytics. Google Tag Manager itself does not set cookies.
- Meta Pixel (
_fbp): advertising measurement on this marketing site, loaded through Google Tag Manager, and only if you accept analytics. - TikTok Pixel: advertising measurement on this marketing site, loaded through Google Tag Manager, and only if you accept analytics.
- OpenAI Ads Pixel (
__oppref): conversion measurement for ChatGPT ads on this marketing site, loaded through Google Tag Manager, and only if you accept analytics. It stores a privacy-preserving ad-click identifier in a first-party cookie.
The advertising pixels above run on this marketing site only - never inside the Resumae app - and only if you accept analytics.
Separately, Cloudflare Web Analytics - traffic measurement from our CDN provider - injects a cookieless beacon into pages at the edge. It sets no cookies, runs before the consent banner can answer, and cannot be switched off from our pages, so declining analytics does not stop it.
Note: your primary sign-in session is stored in local storage, not as a first-party cookie.
Managing your preferences
When you first visit our site, we show a consent banner. You can accept or decline analytics cookies. To change your choice later, use Cookie preferences in the site footer at any time.
You can also clear site data (cookies and local storage) for our domain in your browser settings. The consent banner will reappear on your next visit. Most browsers allow you to block or delete cookies. Note that disabling essential cookies or clearing Firebase session storage will prevent you from signing in.
If you decline analytics after previously accepting, we stop loading Google Analytics on-page tracking, Microsoft Clarity, Google Tag Manager, and the Meta, TikTok, and OpenAI pixels. Google and Microsoft may retain cookies they already set until you clear them in your browser.
Changes to this policy
We may update this Cookie Policy to reflect changes in technology or law. Check the "Last updated" date at the top of this page.