Cookie Policy

This Cookie Policy explains how Resuma uses cookies and similar storage technologies when you access the Service.

We use essential cookies to keep the Service secure and operational. We use optional analytics and measurement tools — PostHog and Vercel Analytics — only if you choose to allow them through the cookie notice.

We use essential first-party cookies provided through Supabase authentication to keep you signed in, refresh your session securely, and protect access to authenticated routes.

These cookies are required for core product functionality and cannot be turned off from the cookie notice because the Service would not work correctly without them.

If you choose Accept on the cookie notice, we load two analytics tools:

PostHog PostHog is our primary analytics platform. It tracks pageviews on every page navigation, session duration, traffic sources and UTM attribution, bounce rate, Core Web Vitals performance metrics (CLS, FCP, LCP, TTFB, INP), and product events such as resume generation, file upload, export, and copying your generated resume.

PostHog stores a persistent distinct identifier and session state using both cookies and browser localStorage. Storage keys are prefixed with ph_. For signed-in users, events are linked to your account identifier so that server-side and client-side events appear on one timeline. For anonymous visitors, no person profile is created.

PostHog is operated by PostHog, Inc. Data may be processed in the United States.

Vercel Analytics and Speed Insights Vercel Analytics collects aggregated, anonymised traffic data (pageviews, referrers, device types). Vercel Speed Insights measures real-world page load performance. Neither tool tracks individual users across sessions for advertising purposes.

If you choose No thanks, none of these tools load in your browser and no analytics data is collected.

Resuma loads Razorpay Checkout only when you actively start a payment flow. Razorpay may use cookies or similar browser storage during checkout to operate the payment experience, prevent fraud, and complete the transaction.

Because payment is initiated directly by you, this storage is tied to the checkout flow rather than general site measurement. Before launch, the exact runtime behavior of Razorpay Checkout in staging must be reviewed and reflected in this policy if additional storage technologies are observed.

Session storage — user:shell:v1 We use browser session storage under the key user:shell:v1 to cache a small user profile shell for the current tab session on protected routes. This helps the interface feel more responsive while account data is refreshed. This data is cleared when the tab session ends.

PostHog localStorage (optional) If you accept optional measurement, PostHog uses localStorage alongside cookies to persist its distinct identifier across sessions. These keys are prefixed with ph_ and are cleared if you revoke consent or clear your browser data. PostHog localStorage is not used for advertising or cross-site tracking.

Neither storage mechanism is used for advertising or cross-site tracking.

When the cookie notice is shown, you can choose Accept or No thanks for optional measurement.

If you want to make the choice again in this browser, use the review action on this page. Clearing your choice does not affect essential authentication cookies that are required to keep the Service secure.