Home
ATS Checker
Resume Builder
Examples
FAQ
Back to Home

Cookie Policy

Effective date: 23 July 2026 · Operator: Hamza Ghariani

1. Introduction

This Cookie Policy explains how EuropeCV ("EuropeCV", "we", "us", or "our") uses cookies and similar technologies on https://www.europecv.io.

It should be read together with our Privacy Policy at /privacy and our Terms of Service at /terms.

This policy is based on the actual EuropeCV application as implemented in our codebase. It does not list cookies or technologies that are not used.

2. Who This Policy Applies To

EuropeCV

Baden-Württemberg, Germany

Germany

Email: [email protected]

Operator: Hamza Ghariani

Effective date: 23 July 2026

3. Cookies and Similar Technologies

Cookies are small text files that a website may store on your device. Similar technologies include browser local storage, session storage, and authentication tokens stored through your browser in connection with sign-in.

Browser storage is technically distinct from cookies, but it can affect your privacy in similar ways when it stores information on your device.

4. What We Actually Use

As currently implemented, EuropeCV uses:

  • Supabase authentication cookies managed through our Next.js and Supabase SSR integration for sign-in and session management.
  • Browser local storage for limited interface and dashboard convenience features.
  • Remote loading of Google Fonts stylesheets from Google servers on site pages.
  • Google Analytics 4 (when `NEXT_PUBLIC_GA_MEASUREMENT_ID` is configured) via Google tag (`gtag.js`).
  • Vercel Web Analytics (when analytics consent is granted) for privacy-focused usage metrics.
  • Third-party pages and domains during Stripe Checkout and OAuth sign-in flows.

We do not currently implement advertising cookies, marketing pixels, retargeting trackers, heatmaps, or A/B testing trackers such as Hotjar or Microsoft Clarity in the application codebase.

5. Categories of Technologies

We distinguish between the following categories:

5.1 Strictly Necessary Technologies

These technologies are used to provide core functionality that you request, such as signing in, maintaining an authenticated session, securing the Service, and operating protected dashboard features.

Where legally permitted, strictly necessary technologies may be used without consent because they are required to provide a service you explicitly request, such as account access.

As currently implemented, this category includes Supabase-managed authentication session cookies used by our authentication flow.

5.2 Functional Browser Storage

EuropeCV currently uses browser local storage for limited convenience features, including:

  • Dashboard sidebar collapsed/expanded state (`sidebar_collapsed`).
  • A local dashboard document list cache (`europe_cv_documents`) used for UI convenience in parts of the dashboard and cover-letter experience.

These values are used for interface convenience and local UI state. They are not used for advertising or cross-site tracking.

EuropeCV does not currently offer a separate toggle for this browser storage in the cookie preference center because it is used for core interface convenience rather than analytics or marketing.

5.3 Analytics Cookies

When Google Analytics is enabled, EuropeCV uses Google Analytics 4 through Google tag (`gtag.js`) loaded from Google servers.

Google Analytics helps us understand how visitors use the Service, such as pages visited, general usage patterns, and referral information.

Analytics cookies are not strictly necessary for core account functionality. Where required by applicable law, they should be used only with appropriate consent.

Server-side session and feature-usage records may also be created for security, billing, and service operation. Those records are described in the Privacy Policy and are separate from Google Analytics browser cookies.

5.4 Marketing and Advertising Cookies

EuropeCV does not currently use cookies for advertising or cross-site behavioral tracking on europecv.io.

We do not currently run advertising trackers or retargeting pixels in the reviewed application codebase.

6. Supabase Authentication

EuropeCV uses Supabase Auth with the Supabase SSR helpers for Next.js. Authentication is handled using HTTP cookies set and refreshed through our server and middleware integration.

These authentication cookies are used to keep you signed in, protect account-only routes, and support secure session handling.

We do not publish specific authentication cookie names or token values in this policy because doing so could create unnecessary security risk.

Exact cookie names, persistence, and expiration are managed by Supabase and our authentication configuration. Those details should be verified against the current Supabase SSR behavior before relying on them for legal analysis.

7. localStorage and sessionStorage

EuropeCV currently uses localStorage in the browser for the items described above.

We did not identify current use of sessionStorage in the reviewed application codebase.

We did not identify use of IndexedDB, service workers, or Cache Storage APIs for tracking in the reviewed application codebase.

The local dashboard document cache may contain document names, timestamps, preview lines, and related UI metadata. It should not be treated as a secure place to store sensitive information. Core resume and account data is stored server-side subject to the Privacy Policy.

8. Stripe Payments

EuropeCV uses Stripe Checkout through a redirect flow. When you purchase Credits, you are redirected to Stripe-hosted checkout pages.

EuropeCV does not embed Stripe Elements or Stripe Payment Element on the main site in the reviewed implementation.

Stripe may use cookies or similar technologies on Stripe-hosted pages under Stripe's own cookie and privacy policies. EuropeCV does not control Stripe's cookies on stripe.com or related Stripe domains.

9. Google and LinkedIn Sign-In

If you choose Google or LinkedIn sign-in, you are redirected to the relevant provider to authenticate.

Those providers may set or use cookies on their own domains during the authentication flow. EuropeCV does not control provider cookies on google.com, linkedin.com, or related provider domains.

EuropeCV receives authentication information through Supabase after successful sign-in, such as email, name, profile picture URL, and provider identifiers, as described in the Privacy Policy.

10. Google Fonts

EuropeCV currently loads the Google Sans font remotely from Google Fonts services (`fonts.googleapis.com` and `fonts.gstatic.com`) in the site layout.

This creates network requests from your browser to Google servers. Even if no cookie is set, Google may receive connection information such as your IP address, browser type, and referrer.

We have not verified that Google Fonts sets cookies in this specific implementation. Do not assume that no personal data is processed merely because the resource is a font stylesheet.

Whether this remote font loading requires consent in your jurisdiction should be reviewed with legal counsel.

11. Google Analytics

EuropeCV may use Google Analytics 4 when a measurement ID is configured through the `NEXT_PUBLIC_GA_MEASUREMENT_ID` environment variable.

In that case, the site loads `gtag.js` from `www.googletagmanager.com` and sends usage information to Google.

Google may set or read analytics cookies and process connection data such as IP address, browser information, pages visited, and referral information according to Google's analytics configuration and policies.

EuropeCV does not control all processing performed by Google. For more information, see Google's documentation and privacy materials: https://policies.google.com/privacy

Google Analytics is used for website analytics only. It is not used by EuropeCV for employment decisions.

12. Connection Data

Even when no cookie is set, web servers and third-party resources may process connection information such as IP address, browser type, device information, request timestamps, and referrer data.

This is described in more detail in our Privacy Policy.

15. Managing Cookies and Browser Storage

You can delete or block cookies through your browser settings.

You can also clear browser local storage through your browser settings or developer tools.

Blocking or deleting strictly necessary authentication cookies may prevent you from signing in or staying signed in.

Blocking functional browser storage may reset interface preferences or local dashboard list caches.

Blocking analytics cookies may limit our ability to measure site usage but should not prevent core account functionality if authentication cookies remain allowed.

17. Retention

Authentication cookie duration is determined by Supabase and our authentication configuration. We do not publish fixed expiration periods here because they may be session-based, refreshed on activity, or otherwise provider-managed.

According to Google's documentation for Google Analytics, common analytics cookies include `_ga` (often up to 2 years), `_gid` (often up to 24 hours), and `_ga_<container-id>` (often up to 2 years). Actual duration may vary based on Google settings and browser behavior.

The consent preference cookie `ecv_cookie_consent` is stored for up to 12 months so EuropeCV can remember your choices between visits.

Local storage values remain on your device until you clear them or the application removes them.

We do not use generic statements such as "all session cookies are deleted when you close your browser" because actual behavior depends on browser and provider settings.

19. No Advertising or Cross-Site Tracking

EuropeCV does not currently use cookies for advertising or cross-site behavioral advertising on europecv.io.

Google Analytics is used for website usage analytics, not for employment decisions or targeted advertising by EuropeCV.

This statement applies only to the current implementation and should be reassessed if advertising or marketing tracking technologies are added later.

20. Changes to This Cookie Policy

This Cookie Policy is effective as of 23 July 2026 and was last updated on 25 July 2026.

We may update this Cookie Policy if our use of cookies or similar technologies changes.

21. Contact

EuropeCV

Baden-Württemberg, Germany

Germany

Email: [email protected]

Cookie Preferences

Choose which optional technologies EuropeCV may use. Necessary cookies are always active because they are required for sign-in, security, and core functionality. Learn more in our Cookie Policy and Privacy Policy.

Necessary

Required for sign-in, session management, security, and core site functionality. These cannot be disabled.

Always on

Analytics

Helps us understand how visitors use EuropeCV through Google Analytics 4 and Vercel Web Analytics when enabled. Disabled by default until you consent.