1. What Are Cookies?
Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. Cookies allow the website to recognize your device and remember information about your visit, such as your preferences and login status. Similar technologies include local storage, session storage, and pixel tags.
This Cookie Policy explains what cookies we use, why we use them, and how you can control them. This policy should be read alongside our Privacy Policy, which provides further detail on how we use personal information.
2. Types of Cookies We Use
2.1 Strictly Necessary Cookies
These cookies are essential for the Service to function. They enable core functionality such as user authentication, session management, and security. You cannot opt out of these cookies because the Service cannot operate without them.
| Cookie / Technology | Provider | Purpose | Duration |
|---|---|---|---|
| CognitoIdentityServiceProvider.* | AWS Cognito | Stores authentication tokens (ID token, access token, refresh token) to keep you signed in | Session / 30 days |
| amplify-signin-with-hostedUI | AWS Amplify | Tracks whether you signed in via hosted UI or direct authentication | Session |
| CSRF token | Lifted CV | Prevents cross-site request forgery attacks | Session |
2.2 Functional Cookies
These cookies enable enhanced functionality and personalization, such as remembering your preferences and UI settings. If you disable these cookies, some features may not work as expected.
| Cookie / Technology | Provider | Purpose | Duration |
|---|---|---|---|
| theme | Lifted CV | Stores your display theme preference | 1 year |
| localStorage (UI state) | Lifted CV | Remembers resume editor state, filter preferences, and sidebar settings | Persistent |
2.3 Payment Processing Cookies
When you interact with our payment system, Stripe sets cookies on your device to process transactions securely and prevent fraud. These cookies are classified as strictly necessary for payment functionality.
| Cookie / Technology | Provider | Purpose | Duration |
|---|---|---|---|
| __stripe_mid | Stripe | Fraud prevention and payment session identification | 1 year |
| __stripe_sid | Stripe | Payment session management | 30 minutes |
For more information, see Stripe's Cookie Policy.
2.4 Analytics Cookies
We may use analytics cookies to understand how visitors interact with our Service. These cookies collect information in an aggregated form to help us improve performance and user experience. You can opt out of analytics cookies through your browser settings or our consent mechanism.
If we implement analytics tools (such as Google Analytics or similar services), we will update this section with specific cookie names, providers, and durations. Currently, we do not use third-party analytics cookies.
3. Third-Party Cookies
Our Service integrates with third-party services that may set their own cookies on your device. We do not control these cookies. The third-party services we currently integrate with include:
- Stripe -- Payment processing and fraud prevention. See Stripe's Cookie Policy.
- AWS (Amazon Web Services) -- Authentication and infrastructure. See AWS Privacy Notice.
Our job search API integrations (LinkedIn, Indeed, Glassdoor, and others) are server-side only and do not set any cookies on your device.
4. How to Manage Cookies
You can control and manage cookies in several ways. Please note that disabling certain cookies may impact the functionality of our Service.
Browser Settings
Most browsers allow you to view, manage, and delete cookies. The process varies by browser:
- Chrome: Settings > Privacy and Security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
Opt-Out of Specific Cookies
- Strictly necessary cookies: Cannot be disabled as they are required for the Service to function.
- Functional cookies: Can be disabled through your browser settings, but some features may not work correctly.
- Analytics cookies: Can be disabled through your browser settings or by using browser extensions such as Google Analytics Opt-Out.
5. Information for EU/EEA Users
Under the ePrivacy Directive and GDPR, we are required to obtain your consent before setting any non-essential cookies. When you first visit our Service from the EU/EEA or UK, you will be presented with a cookie consent mechanism that allows you to:
- Accept all cookies
- Accept only strictly necessary cookies
- Customize your cookie preferences by category
You can withdraw your consent at any time by clearing your cookies and revisiting the site, or by adjusting your browser settings. We do not use pre-ticked boxes or treat continued browsing as consent.
6. Information for California Users
Under the CCPA, certain cookies that track your activity for advertising purposes may constitute a "sale" or "sharing" of personal information. We do not currently use cookies for targeted advertising or sell personal information collected through cookies. If this changes, we will update this policy and provide a "Do Not Sell or Share My Personal Information" option. We honor Global Privacy Control (GPC) signals as a valid opt-out request.
7. Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in technology, regulation, or our practices. The "Effective Date" at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.
8. Contact Us
If you have questions about our use of cookies, please contact us at hr@liftedcv.com.