Privacy, in plain words

What happens to your resume

• Everything you type is stored in your browser's local storage, on your device only.
• The PDF is generated by your browser, on your device. It is never uploaded, queued, or cached on a server.
• There are no accounts, so there is no profile of you anywhere.
• The JSON export is a file saved directly to your device; we never see it.
• If you arrive through a link like "/builder?name=...", the name travels in your own browser's address bar only, is written into your local draft, and is removed from the URL immediately. It is not logged by us and not sent anywhere.

Cookies and tracking

PaperCV sets no cookies. The only browser storage used is the local storage entry that holds your resume draft, which is strictly necessary for the tool to work and stays on your device. There are no advertising trackers, no social pixels, no fingerprinting, and no third-party scripts: every file the site loads (fonts included) is served from this domain. As of the date above, no analytics are active. If privacy-respecting page analytics are enabled later, they will be cookieless and aggregate only (page views and country level), will never see resume content, and this page will be updated first.

What the infrastructure sees

PaperCV is served as static files by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). Like any web host, Vercel processes standard server logs (IP address, user agent, requested URL) to deliver and secure the site; these logs are kept by Vercel under its own retention rules and may be processed in the United States. They concern page requests only: your resume content never appears in them because it never leaves your browser.

How to delete your data

Click "New" in the builder to clear the stored resume, or clear this site's data in your browser settings. Because nothing exists outside your browser, that is a complete erasure; there is no copy to ask us to delete.

Your rights, and who is responsible

PaperCV is published by Damien Yvert. Since the site collects no personal data server-side, requests for access, correction, or erasure are fulfilled directly on your device as described above. If you have any question about this policy, believe something behaves differently from what it says, or want to report a security issue, write to damienyvert.dev@gmail.com. Security researchers can also use the machine-readable contact at /.well-known/security.txt.