Cookie notice

Cookie notice

CVSheets uses only cookies and browser storage that are strictly necessary for the service or that remember a choice you made. There are no analytics or advertising cookies, so there is no consent banner. This landing site sets one cookie, rb.theme, and only when you choose light or dark.

Preference cookie

Cookie	Purpose
rb.theme	Your light or dark choice, set only when you choose one on this site or in the app. It is shared between this site and the app, so both open in the theme you picked. It holds only Light, Dark or System and lasts one year.

Cookies set by the app and API

In production these names carry the __Host- prefix (the shared rb.theme cookie above cannot, because it covers both sites).

Cookie	Purpose
rb.session	Keeps you signed in
rb.af	Protects requests against forgery
rb.2fa	Remembers a two-factor sign-in in progress
rb.ext	Remembers a sign-in with Google, Microsoft or LinkedIn in progress
rb.ext.c.*	Checks that a sign-in with Google, Microsoft or LinkedIn came back to the browser that started it. Lasts 15 minutes
rb.ext.n.*	Ties the reply from Google, Microsoft or LinkedIn to that one sign-in, so it cannot be replayed. Lasts 15 minutes
rb.device	Recognises a device you have verified
rb.share	Lets you open a protected public link

Cloudflare also sets security cookies to protect the service from abuse.

Browser storage

Key	Purpose
rb.theme	Your light or dark choice (a copy of the cookie, for when cookies are blocked)
rb.culture	Your language
rb.draft.*	Unsent drafts, kept on your device. Removed when you sign out or delete your account
rb.guest.v1	Only in browsers that used the earlier guest editor: the CV built there before an account existed. Moved into your account when you sign in, then removed; also removed when you sign out or delete your account. New ones are no longer created
rb.exportprefs.*	Your choices in the Download dialog, per CV. Removed when you sign out or delete your account
rb.ref.v1	The invite code you arrived with, for up to 30 days. Removed when you sign out or delete your account
rb.ui.v1	Your view choices in the app, such as grid or list, the sort order of your CVs, larger text and whether a new CV starts step by step. It holds no personal data
rb.comfort	Whether you switched on larger text on this site. It holds only on or off, is not a cookie and is not shared with the app
rb.session.v1	Only in browsers that cannot message their other tabs directly: a counter and a time that tell your other open tabs you signed in or out, so they follow. It holds no personal data
rb.platform	Which layout to show first (iPhone, Android or standard), so the page does not flicker. It holds no personal data
rb.deletion.v1	Your account id, only while a deletion you asked for during maintenance is waiting, so the app can clear this device once it has run

Cloudflare

Cloudflare protects the site from abuse and may set its own security cookies for that purpose. The bot check (Cloudflare Turnstile) runs only on the contact form and on the sign-up, sign-in, email link and password reset pages.

Analytics

Visitor statistics come from Cloudflare Web Analytics, which does not use cookies or browser storage and does not track you across sites.

Your choices

Because every cookie and storage key here is strictly necessary or remembers a choice you made, the law does not require a consent banner. You can delete cookies and site data in your browser settings at any time. If you block them, signing in will not work, but this website still will.

Questions: . See also the privacy policy.