Privacy Policy
Last updated: 2026-09-01.
The essentials
This site has no user accounts or passwords. Some paid tools (CV Screener, Website Audit) do process files or URLs you give us to generate your report, and do process payments. We don't sell personal data to third parties or use it for advertising.
Cookies
This site doesn't use advertising-tracking cookies. We use a single, strictly-necessary technical cookie: the CV Screener Premium access session cookie (HttpOnly, lasts 1 year), which lets us recognize that you've already paid without asking for a username and password. Because it's strictly necessary to deliver the service you requested, it doesn't require a consent banner (Art. 5(3) of the ePrivacy Directive), but you can delete it anytime from your browser settings - you'll lose automatic access and need to recover it with your email.
Analytics
We use aggregate, cookie-free visit analytics (Cloudflare Web Analytics and Umami) to understand how many people visit this site - neither one identifies individual people.
What we do with the files and URLs you give us
CV Screener: your PDF's text is sent to OpenAI to generate the analysis and is never stored on our servers - it's discarded from memory as soon as the AI responds. Website Audit: we analyze the public pages of the URL you give us to generate the report; the report is kept for 24h (enough time to complete payment and download it) and then automatically deleted. Moodle Gradebook Interpreter: the gradebook file you upload (directly, or via the API on RapidAPI) is processed on the fly and never stored.
Payments
One-time payments (CV Screener, Website Audit report) are processed by Stripe - we never see or store your card number. To verify your access we keep a minimal record (your email and what you purchased) while the access is active; you can ask us to delete it by writing to us.
Who we work with (data processors)
Stripe (payments), OpenAI (CV and audit text analysis), Upstash (the database where we store access and payment records), Cloudflare (hosting and analytics), and Render (API hosting). Each one processes data only to provide that specific service to us, under its own privacy policy and compliance guarantees (GDPR/SCCs where applicable).
Your rights
You can ask us to access, correct, or delete your data, or object to its processing, by emailing us. We'll respond within the applicable legal timeframe.
Contact
Questions about this policy: [email protected].