Cookie policy
Last updated 30 September 2026
In short: signing in uses necessary account cookies. Cloudflare Turnstile may use its own cookies or browser storage when you check a resume or sign in. We use no advertising cookies or first-party analytics cookies. Vercel Web Analytics counts page visits without cookies.
What cookies and browser storage are
A cookie is a small file a website saves in your browser and reads back on later visits. Browser storage (local storage and session storage) is similar, but its contents stay on your device and are not sent to the website with each request.
Cookies we set
- Sign-in session (named
sb-…-auth-token, sometimes split into parts ending.0,.1): set by our account provider, Supabase, when you sign in. It keeps you signed in and lets us show only your own resumes and credits. It may last up to 400 days and can be renewed while you use the site. Signing out removes it from that browser. It is needed for signing in. - Google sign-in check (named
sb-…-auth-token-code-verifier): only if you choose Google sign-in. It proves that the sign-in that comes back from Google is the one you started, and is removed once you are signed in. It is needed for Google sign-in.
These cookies support the sign-in service you choose. We do not use a cookie banner because we do not set optional analytics or advertising cookies.
What we keep in your browser
Our server cannot read these browser storage entries directly. Text you choose to submit or save is sent to us as described in our privacy notice.
- Builder draft (local storage,
throughline.build.v1): if you build a resume without signing in, your draft is saved on this device so you do not lose it. It stays until it is cleared after saving, or you clear your browser data. - Sign-in round trip (session storage,
throughline.stash.v1): if you press "Sign in to tailor", your resume and job post are kept in that tab so you do not have to paste them again. The saved text can be used for up to 30 minutes and is removed when read; otherwise it remains until you close the tab or clear site data. - Job post for a tailored resume (session storage,
throughline.jobpost.v1.…): the job post you tailored for, kept in that tab so the cover letter form can fill it in for up to 30 minutes. The entry can remain until you close the tab or clear site data.
Cookies set by other services
- Cloudflare Turnstile runs on the resume check and sign-in forms to make sure you are not a bot. It may use its own cookies or storage for that check only. See Cloudflare's privacy policy.
- Google (if you choose Google sign-in) and PayMongo (when purchases open and you pay) show their pages on their own websites, where their own cookie policies apply.
Our fonts are served from our own site, so loading a page sends nothing to Google or any other font service.
How to control them
You can see and delete cookies and site data in your browser settings, or browse in a private window. If you block the sign-in cookie you can still check your resume and use the builder, but you cannot sign in. Blocking Turnstile storage may prevent its bot check from completing. Signing out removes the sign-in cookie from that browser.
Changes and contact
If we ever add a cookie that is not strictly necessary, we will update this page first and ask for your consent before setting it. Questions: our support address. See also our privacy notice.