LegendCVHome →
🍪 Cookie Preferences

Cookie Policy

Transparency First.

Learn how cookies help LegendCV keep you signed in, remember your preferences, and improve your experience — and change your choices at any time.

Last updated 21 June 2026Contact privacy team

This Cookie Policy explains how LegendCV (www.legendcv.com) uses cookies and similar technologies (collectively, "cookies") on our websites and applications. It should be read together with our Privacy Policy. This Policy complies with the UK Privacy and Electronic Communications Regulations (PECR), the UK GDPR, and the EU GDPR.

You are in control.
We ask for your consent the first time you visit and remember your choice. You can change or withdraw your consent at any time using the button below or the "Cookie Preferences" link in the footer of every page.
Manage your cookie preferences
Open the preferences dialog to enable or disable categories.

1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the site to recognise your device, remember preferences, keep you signed in, and gather analytics. We also use similar technologies such as local storage and pixels — references to "cookies" in this Policy include these.

2. Categories of Cookies We Use

Our consent banner groups cookies into four clear categories that match the toggles in the preferences dialog:

Required (Always on)
Essential for the Service to work — authentication tokens (Supabase session), CSRF protection, load balancing, Cloudflare bot mitigation (such as __cf_bm), and a small cookie that remembers your cookie choices themselves. These cannot be disabled.
Analytics (PostHog)
Anonymous usage analytics so we can understand which features help job seekers most. Includes page views, button clicks, and funnel events. Resume content, payment details, and other PII are never sent. Off until you opt in.
Performance
Session replay and heatmaps used to debug UI issues and improve performance. Resumes, payment forms, and input fields are always masked. Off until you opt in.
Marketing
Reserved for future advertising integrations (for example, conversion pixels). No marketing cookies are active today; this category exists so your future preference is respected from the moment any are introduced.

3. Third-Party Cookies

The following third parties may set cookies through our Service:

  • Cloudflare — security, performance and bot protection (Required).
  • Stripe — payment processing and fraud prevention on billing pages (Required, only on checkout / billing).
  • Google — only if you sign in with Google OAuth (Required for that flow).
  • Supabase — authentication session storage in first-party local storage (Required).
  • PostHog — product analytics and optional session replay (Analytics & Performance, only with consent).

5. Managing & Withdrawing Consent

You can change or withdraw your consent at any time:

  • Click Cookie Preferences in the footer of any page, or use the button at the top of this page.
  • Browser controls let you view, block, or delete cookies — see: Chrome · Safari · Firefox · Edge.
  • Send a privacy request to privacy@legendcv.com — see your full GDPR / UK GDPR rights in our Privacy Policy.

Blocking Required cookies will prevent you from signing in or using the Service.

6. Retention

Session cookies expire when you close your browser. Persistent cookies remain for a defined period (typically up to 12 months) or until you delete them. Your saved cookie preference is kept for up to 12 months so we don't show the banner on every visit.

7. Changes

We may update this Cookie Policy as the Service evolves. If we add a new cookie category or a new third-party processor that sets cookies, we will re-prompt for consent. The "Last updated" date above reflects the most recent version.

8. Contact

Questions about cookies or to exercise your rights? Email privacy@legendcv.com.

Why professionals trust LegendCV

Built with privacy, security and AI transparency in mind.

  • UK GDPR Aligned
    Processed under UK GDPR and the Data Protection Act 2018.
  • Secure Authentication
    Email/password with hashing, plus Google OAuth.
  • Encrypted Storage
    TLS in transit, encryption at rest at infrastructure providers.
  • Stripe Payments
    Card details handled by Stripe — never reach our servers.
  • AI Transparency
    AI providers do not train third-party models on your content.
  • User Data Control
    Access, export and delete your data from your account.
Privacy Policy
How we collect, use and protect your data.
Terms of Service
The rules for using LegendCV.
Acceptable Use
What's allowed — and what's not.
AI & Data Processing
How LegendCV uses AI responsibly.