Cookie & Local Storage Policy
Last updated: February 2026
Cookies & Storage at a Glance
A quick overview of what CV Score stores on your device.
Apart from the strictly necessary cookies, our self-hosted reach measurement stores exactly one entry (rybbit-visitor-id) in your browser’s local storage. It sets no cookies and passes nothing on to third parties. Section 3 explains what is recorded and how to remove it.
1. Cookies and Similar Storage Technologies
Cookies are small text files that are stored on your device (computer, tablet or mobile phone) when you visit a website. Browsers also provide other storage areas, above all local storage, which can hold data on your device in the same way. This policy covers both: cookies and comparable storage technologies.
Types of Storage
- Session cookies
- Temporary cookies that expire when you close your browser
- Persistent cookies
- Cookies that remain on your device for a set period or until you delete them
- First-party cookies
- Cookies set by the website you're visiting
- Third-party cookies
- Cookies set by domains other than the one you're visiting
- Local storage
- A browser storage area that is not a cookie: entries are not sent along with every request and stay on your device until they are deleted
2. How We Use Cookies
CV Score uses only essential cookies that are strictly necessary for the Service to function. We do not use any non-essential cookies. Apart from cookies, our self-hosted reach measurement stores a single entry in your browser’s local storage — section 3 describes exactly what it does.
Essential Cookies We Use
The following cookies are necessary for CV Score to work properly:
| Cookie Name | Purpose | Duration |
|---|---|---|
| supabase-auth-token | Stores your authentication session to keep you logged in. This cookie is essential for account access and security. | Session / up to 7 days |
| sb-*-auth-token | Stores authentication refresh tokens for seamless session management. | Up to 7 days |
These cookies are strictly necessary for the Service to function. Without them, you would not be able to stay logged in or access your account.
3. Reach Measurement (Self-Hosted Analytics)
We want a rough picture of how our pages are used, so we run Rybbit, analytics software we host ourselves on our own infrastructure. It is not an advertising network; the data it collects is not passed on to third parties and is not used for advertising.
What Rybbit Stores on Your Device
Rybbit sets no cookies. It stores a single entry in your browser’s local storage:
| Entry | Purpose | Storage duration |
|---|---|---|
| rybbit-visitor-id | A randomly generated identifier that lets us tell returning visitors from new ones. It contains neither your name nor your email address nor any other detail you have given us. | Until you delete the site data for cvscore.net in your browser |
What Is Recorded
Rybbit records aggregated usage data: the pages that are opened, the referring page, the approximate region you are visiting from, the device and browser type, and individual interactions such as clicks on links and buttons. Because of the identifier described above, repeat visits from the same browser are recognised as such.
How to Remove or Prevent It
You can put a stop to the measurement yourself at any time, without an account and without asking us:
- Delete the site data for cvscore.net in your browser settings. This removes the rybbit-visitor-id; a later visit would be counted as a new visitor.
- Block site data storage for this domain in your browser settings, so that no identifier can be stored in the first place.
- Block the script from rybbit.internal.thecodecave.de with a content blocker or a browser extension. This stops the measurement completely.
The legal basis and further details of the reach measurement are set out in our Privacy Policy.
4. What We Do NOT Use
CV Score is committed to privacy. We do NOT use any of the following:
Analytics cookies
No Google Analytics, Adobe Analytics, Mixpanel, or similar tracking tools
No third-party analytics service is loaded on our pages. Our own reach measurement runs on our own infrastructure and is described in section 3.
Advertising cookies
No Google Ads, Facebook Pixel, LinkedIn Insight Tag, or retargeting cookies
We do not serve targeted ads or share data with advertising networks.
Social media tracking
No Facebook, Twitter, LinkedIn, or other social media widgets or tracking pixels
We do not embed social media trackers on our site.
Performance cookies
No Hotjar, Crazy Egg, or session recording tools
We do not record your screen, mouse movements, or interactions.
Marketing cookies
No email tracking pixels or marketing automation cookies
We do not track email opens or clicks for marketing purposes.
We believe in minimal data collection. Our business model is based on providing a valuable service, not on collecting and monetizing your data.
5. Managing Cookies and Local Storage
You decide what stays stored on your device.
Browser Settings
Most web browsers let you manage cookies and other site data in their settings. You can typically:
- View the cookies and site data stored on your device
- Delete all or specific cookies and site data
- Block all cookies
- Block third-party cookies only
- Delete cookies and site data when you close your browser
Impact of Blocking or Deleting Storage
If you block or delete the data CV Score stores on your device:
- You will be logged out and unable to stay signed in
- You will need to log in again each time you visit
- Some features may not work correctly
- The rybbit-visitor-id is removed as well, so your next visit is counted as a new visitor
Browser-Specific Guides
For instructions on managing cookies and site data, visit your browser’s help pages:
- Chrome: support.google.com/chrome/answer/95647
- Firefox: support.mozilla.org/kb/clear-cookies-and-site-data-firefox
- Safari: support.apple.com/guide/safari/manage-cookies-sfri11471
- Edge: support.microsoft.com/microsoft-edge/delete-cookies
6. Third-Party Cookies
When using certain features, third-party services may set cookies on their own domains:
Google OAuth
When: If you sign in with your Google account
Cookies: Google may set cookies on google.com domains for authentication
Governed by Google's Privacy Policy
Polar (Payment)
When: If you make a purchase
Cookies: Polar may set cookies for payment processing and fraud prevention
Governed by Polar's Privacy Policy
We do not control cookies set by third-party services. Please review their respective privacy policies for information about their cookie practices.
7. Do Not Track Signals
Browsers can send a Do Not Track (DNT) signal. There is no cross-site tracking on CV Score that it could switch off: we run no advertising networks, no third-party analytics and no tracking pixels. Our own reach measurement is limited to the aggregated usage statistics described in section 3, and section 3 also explains how to remove or block it.
The same applies to the Global Privacy Control (GPC) signal: we do not sell your data and do not pass it on to third parties for advertising purposes.
8. Changes to This Policy
We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
9. Contact Us
If you have questions about our cookie practices, please contact us at:privacy@cvscore.net