You can create and preview a CV without an account. Anonymous drafts are stored in your browser. Account and resume data is sent to the server only when you register, sign in, or request an authenticated download.
Information processed while you edit
The builder stores anonymous draft content and template appearance choices in your browser's local storage. This can include contact details, employment history, education, skills, and any other information you enter. The draft remains on that browser until you reset it, clear browser storage, or remove it through browser controls.
Account and authentication information
When you create an email account, the application stores your name, email address, and a securely hashed password. When you use Google or Facebook sign-in, the application may receive an account identifier, name, email address, and profile image made available by that provider. Provider access tokens and account links are handled by the Laravel Socialite integration and should be protected as application secrets.
Saved resumes and downloads
When an authenticated download is requested, the server validates the selected template and CV payload and creates or updates a resume record connected to your account. The PDF is generated in your browser from the live preview. The current starter does not upload the generated PDF file to the server.
Cookies and local storage
Laravel uses session and security cookies for authentication and CSRF protection. The builder uses local storage for anonymous drafts, pending-download state, and template appearance preferences. Configure production cookies for HTTPS, secure transport, and an appropriate same-site policy.
Analytics and third-party services
This starter does not include an analytics or advertising integration. Font Awesome styling is loaded from cdnjs, so the visitor's browser contacts that CDN when rendering pages. Google and Facebook receive information only when a visitor chooses the corresponding sign-in option. Update this policy before adding analytics, advertising, file storage, email marketing, error tracking, or other third-party services.
Data retention and deletion
Anonymous drafts are controlled through browser storage. You can permanently delete your account, saved resumes, linked social sign-in records, and active API tokens from the account deletion page. Anonymous drafts stored in your browser or mobile device must be removed through that device's storage controls.
Security
The application uses password hashing, CSRF protection, session regeneration, request validation, and authenticated resume endpoints. No internet service can promise absolute security. Keep Laravel and JavaScript dependencies patched, use HTTPS, protect environment secrets, restrict server access, and maintain tested backups.
Children
Free CV Maker is intended for people preparing career documents and is not designed for children who cannot legally consent to data processing in their jurisdiction.
Contact
Questions or privacy requests can be sent to [email protected]. Replace this contact with the responsible legal entity and privacy contact before commercial launch.
This project policy is a practical implementation template, not legal advice. Review it with qualified counsel for the countries where the service will operate.