Cookie Policy
Last updated: July 2026
What cookies we set
| Cookie | Purpose | Duration |
|---|---|---|
next-auth.session-token | Keeps you signed in. Required for the resume builder, dashboard, and any authenticated feature. | Session / 30 days |
resume-optimizer_csrf | Double-submit CSRF protection token, checked against a matching request header on every state-changing request. | Session |
Both of these are strictly necessary for the site to function -- they are not used for advertising or cross-site tracking, and we do not show a cookie consent banner for them because they don't require consent under most cookie-law frameworks (they're essential to providing the service you asked for).
Third-party cookies
If this deployment has Google Analytics configured, that service may set its own cookies to measure usage, as described in Google's own privacy and cookie policies. We do not control the specifics of those cookies.
Managing cookies
You can block or delete cookies through your browser settings. Blocking the session cookie will sign you out and prevent authenticated features (like saving a resume) from working; blocking the CSRF cookie will prevent form submissions from succeeding.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. See also our Privacy Policy and Terms of Service.