Privacy Policy

Last updated: September 30, 2026

1. Your resume stays in your browser

ResumePico runs entirely in your browser. The editor, the live A4 preview, the templates, local saving and the PDF export all execute on your own device. Your resume content — name, contact details, employment history, education, skills, projects and any optional avatar — is never uploaded to our servers for processing, because there is no server-side step: local processing is not a disguised upload.

• Drafts are stored only in your browser's local storage (localStorage) on your device.
• JSON import and export read and write local files; nothing is transmitted.
• We have no user accounts, passwords, or server-side copies of your resume.
• Clearing site data, or using Clear in the editor, removes the locally saved draft.

2. First-party visit statistics

Our own server counts page views and estimates daily visitors so we can monitor uptime, availability and aggregate usage. A first-party page view record contains the page path and language, the referring host, a country code, broad browser, device and operating-system categories, and a short irreversible visitor value salted with a key that changes each day.

• We do not keep raw IP addresses, raw User-Agent strings, full referring URLs, or a visitor cookie.
• An IP address is compared in memory only, for example to exclude internal probes, and is not written to the statistics database.
• First-party statistics do not use cookies, do not track you across websites, and are independent of Google Analytics.

3. Optional Google Analytics 4

Google Analytics 4 (provided by Google LLC) is an optional third-party measurement. On production pages it loads only after you choose Allow in the analytics settings at the bottom of the page. This explicit opt-in applies in every region; GA4 is never enabled by default.

• Before you allow it, no Google Analytics script is loaded and no Google request is made. We do not send a "denied" ping.
• If you decline or withdraw consent, we immediately delete the GA cookies set for this site.
• If your browser sends Do Not Track (DNT) or Global Privacy Control (GPC), GA4 stays blocked even after an earlier allowance; the privacy signal wins.
• When allowed, GA4 receives a clean page path and title without query string or fragment, plus ordinary browser and network information that can include an IP address. Resume content, uploaded files and anything you type are never sent to GA4.
• GA4 can set pseudonymous identifiers. The saved consent preference and GA cookies expire within at most 180 days, and you can withdraw at any time.
• The GA4 property is configured to retain event data for two months; Google Signals and enhanced measurement are disabled, and no advertising signals or personalization are enabled.

Google's own handling of this data is described in the Google Privacy Policy and How Google uses information from sites or apps that use our services.

4. Your choices

• Allow, decline or withdraw analytics consent at any time in the analytics settings shown at the bottom of every page; declining never limits the resume editor or PDF export.
• DNT/GPC overrides an earlier allowance, and browser settings let you clear cookies and site data at any time.
• First-party statistics continue to run without cookies regardless of your analytics choice; Google Analytics remains separate, and the two counts are never added together.

5. Changes to this policy

Updates to this policy are published on this page with a new "last updated" date. This page describes the current implementation only; it does not replace the terms of any third-party service listed above.