Cookie Policy
Last updated 6 September 2026
This page lists the cookies UpurCV sets, and why. It is part of how we explain tracking, as described in the Privacy Policy.
We only use strictly necessary cookies. We do not set advertising, analytics, or social-media pixels. Because of that, we do not show a cookie-consent banner. If we add optional tracking later, we will update this page and ask for consent first.
Cookies we use
| Name | Purpose | Duration | Type |
|---|---|---|---|
| NextAuth session next-auth.session-token | Keeps you signed in to your dashboard | 30 days | Strictly necessary |
| NextAuth CSRF / callback next-auth.csrf-token, next-auth.callback-url | Protects the sign-in flow from cross-site request forgery | Session | Strictly necessary |
| cv_visitor_access | Remembers that you unlocked a private CV so you do not have to re-enter the Access PIN on every page load | 24 hours | Strictly necessary |
| cv_chat_visitor | Anonymous ID used only to enforce the daily chat-question limit per visitor and profile | 36 hours | Strictly necessary |
On HTTPS, NextAuth may prefix cookie names with __Secure-. The purpose is the same.
Similar technologies
We do not use advertising pixels, tag managers, or third-party analytics scripts. Fonts are self-hosted at build time, so your browser does not request fonts from Google when you load the site.
Chat history lives in the page’s memory only. We do not write it to cookies or local storage.
Managing cookies
You can delete or block cookies in your browser settings. If you block strictly necessary cookies, sign-in, private-CV access, and chat limits may not work correctly.
Contact
Questions about this page: support@upurcv.com. See also Contact.