Cookie Policy
Last Updated: October 13, 2026
You can adjust or revoke your cookie choices at any time below. Changes take effect immediately without requiring you to re-log in.
info1. What Are Cookies & Local Storage?
Cookies and local browser storage (such as localStorage and Chrome Extension storage) are small data files placed on your computer or mobile device when you interact with our websites and browser extensions. They enable the service to recognize your device, remember active login sessions, store UI preferences, and evaluate website reliability.
category2. Categories of Cookies We Use
In compliance with the EU ePrivacy Directive and GDPR (Art. 6 & 7), we categorize our cookies into functional classes:
These cookies and tokens are required for core system operation and security. Without them, you cannot log into your dashboard or securely manage job applications.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| payload-token | ResumeTracker | Encrypted authentication token maintaining active user login session. | 5 days |
| csrf_token | ResumeTracker | Prevents cross-site request forgery attacks on state-changing API endpoints. | Session |
Stores user settings to avoid repeated prompts across page reloads.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| resume_tracker_cookie_consent | ResumeTracker | Stores your cookie consent choice ('all' or 'essential'). | Persistent |
| sidebar_state | ResumeTracker | Stores sidebar expanded/collapsed state in localStorage. | Persistent |
We use PostHog to measure platform performance, feature adoption, and application error rates. All inputs and text are pseudonymized and masked before transmission. If you choose "Essential Only", analytics capturing is automatically disabled.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| ph_phc_* | PostHog, Inc. | Collects anonymous usage patterns and application errors to diagnose crashes. | 1 year |
When accessing billing checkout sessions, our payment partner Stripe places security cookies strictly necessary to detect payment fraud and protect against stolen card testing under PCI-DSS standards.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| __stripe_mid, __stripe_sid | Stripe, Inc. | Detects payment fraud, bot attacks, and validates checkout authorization tokens. | 1 year / 30 mins |
toggle_on3. Managing Cookies in Your Browser
In addition to our on-page controls, you can block or delete cookies through your browser settings:
- Google Chrome: Settings → Privacy and Security → Third-party cookies.
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Apple Safari: Preferences → Privacy → Manage Website Data.
- Microsoft Edge: Settings → Cookies and site permissions.
Note: Disabling strictly necessary cookies in your browser will prevent you from signing in or using your dashboard.
mail4. Contact Us
ResumeTracker Support & Compliance
Operating Jurisdiction: Ontario, Canada
Email: [email protected]
Questions regarding tracking and cookies are typically answered within 1–2 business days.