Privacy Policy

Last updated: July 3, 2026

The short version. Your resume is built and stored on your own device — we don't send it to our servers, we don't require an account, and we don't sell it. We use a privacy-respecting, cookieless analytics tool, and we show ads to keep AptResume free. This policy explains what that means and the choices you have.

1. Who we are

AptResume ("AptResume," "we," "us") operates this website. For the purposes of data-protection law, the data controller is [legal entity name and address]. You can reach us about privacy at privacy@aptresume.com.

2. Privacy by design: your resume stays on your device

When you build a resume, it is saved locally in your browser (using your browser's local storage) and is generated into a PDF, DOCX, or save file entirely within your browser. Your resume content is not transmitted to us and is not stored on our servers. As a result:

• We cannot see, access, or recover your resume content.
• Clearing your browser data (or using private/incognito mode) removes your locally saved resume — download a save file to keep it.
• Moving your resume to another device is something you do yourself, with a save file.

3. Information we collect, and why

Because there are no accounts and your resume stays local, we collect very little. Specifically:

• Information you don't send us. Your resume content, and anything you type into the editor, stays on your device. We never receive it.
• Usage analytics (aggregate, cookieless). We use Cloudflare Web Analytics to understand traffic and improve the product — for example, page views and which steps people reach. It does not use cookies, does not collect personal information, and does not track you across sites. Legal basis: our legitimate interest in operating and improving the site (GDPR Art. 6(1)(f)).
• Advertising data. If ads are served by Google AdSense, your device and cookie/identifier information may be processed to serve and measure ads (see Section 5). Where required, this happens only with your consent (GDPR Art. 6(1)(a)). We may instead show first-party "house" ads that involve no third-party tracking.
• Technical/server logs. Our hosting provider (Cloudflare Pages) may process standard request data (such as IP address and user agent) to deliver the site securely. Legal basis: legitimate interest in security and reliability.
• Optional information you provide. If a feature lets you enter an email (for example, to email yourself a copy), we use it only for that stated purpose. It is always optional and never required to download. Legal basis: consent.

4. Cookies and similar technologies

We use browser storage and, where enabled, cookies in three categories:

• Strictly necessary — local storage that keeps the site and your in-progress resume working. These are always on and don't require consent.
• Analytics — our analytics is cookieless, so no analytics cookies are set.
• Advertising — if third-party ads are enabled, the ad provider may set cookies or use similar identifiers. Where the law requires (e.g., the EEA/UK), these load only after you consent, and you can decline or withdraw consent at any time.

You can manage or clear cookies and local storage through your browser settings at any time, and use the in-app reset control to clear your local resume data.

5. Advertising and your choices

To keep AptResume free, we may show ads. Ads are either first-party house ads (no third-party tracking) or served by Google AdSense. When third-party ads are used, Google and its partners may use cookies and device identifiers to serve and measure ads, including personalized ads where permitted.

Your choices:

• In the EEA/UK, personalized ads load only with your consent through our consent banner; you can change your choice at any time.
• Manage Google's ad personalization at myadcenter.google.com, and opt out of many third-party vendors at aboutads.info/choices and youradchoices.com (or youronlinechoices.eu in Europe).
• Learn how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.

6. How we share information

We do not sell your personal information. We share limited data only with service providers ("processors") that help us run the site:

• Advertising: Google AdSense (only if third-party ads are enabled).
• Analytics: Cloudflare Web Analytics.
• Hosting/CDN: Cloudflare Pages.
• Donations: Ko-fi — only if you choose to donate, which happens on Ko-fi's own site under Ko-fi's privacy policy.

We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a business transfer.

California note. Using cookie-based personalized advertising may be considered "sharing" of personal information for cross-context behavioral advertising under the CPRA. We honor opt-out preference signals (including Global Privacy Control) and provide a "Do Not Sell or Share My Personal Information" control where applicable. We do not sell personal information for money.

7. International data transfers

Some providers (such as Google and our host) may process data in the United States or other countries. Where personal data is transferred out of the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) as implemented by those providers.

8. Data retention

• Your resume: retained only on your device, under your control; we hold none of it.
• Analytics: retained in aggregate, without personal identifiers.
• Server logs: retained by our host for a short period for security and diagnostics ([confirm period with host]).
• Optional email (if provided): retained only as long as needed for the stated purpose, then deleted.

9. Your rights

Depending on where you live, you may have rights over your personal data. Because we don't hold your resume or maintain accounts, we typically hold little or no personal data about you — but where we do:

• EEA/UK (GDPR/UK GDPR): rights to access, rectify, erase, restrict, or object to processing, to data portability, and to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority.
• California (CCPA/CPRA): rights to know, delete, and correct personal information, to opt out of sale/sharing, and to non-discrimination for exercising your rights.
• Other regions: similar rights may apply under your local law.

To exercise any right, contact us at privacy@aptresume.com. We will verify and respond as required by applicable law.

10. Do Not Track and Global Privacy Control

Browsers may send "Do Not Track" signals; there is no common standard, so we do not respond to DNT. We do honor Global Privacy Control (GPC) signals as a valid opt-out of sale/sharing where applicable law requires.

11. Children's privacy

AptResume is a general-audience tool and is not directed to children under 13. We do not knowingly collect personal information from children under 13 (or under the applicable age in your country, up to 16 in parts of the EEA). If you believe a child has provided us personal information, contact us and we will delete it.

12. Security

We keep our footprint small by design — no accounts and no server-side resume storage — which limits what could be exposed. We serve the site over HTTPS and rely on reputable providers. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

13. Changes to this policy

We may update this policy from time to time. We'll change the "last updated" date above and, for material changes, provide more prominent notice on the site.

14. Contact

Questions or requests about privacy? Contact us at privacy@aptresume.com[, or our EU/UK representative at [representative details] if applicable].