Short version: Your CV content never leaves your device — it lives in your browser's localStorage and we cannot access it. We collect anonymous analytics and will show ads to keep the service free. This policy explains all of that in full.
1. Who we are
Simple CV ("we", "us", "our") is a free CV builder available at simplecv.io. If you have questions about this policy, contact us at privacy@simplecv.io.
2. What data we collect and why
2.1 Analytics
We use a third-party analytics service to understand how people use Simple CV so we can improve it. The analytics service may collect:
- Pages visited and features used (e.g. which section of the builder you opened)
- Browser type, device type, and operating system
- Country-level location derived from your IP address (the full IP address is not stored by us)
- Session duration and navigation flow
We do not enable session recording or any feature that reads your CV content. Analytics are only activated after you give consent via the banner shown on your first visit.
The analytics service sets a first-party cookie to recognise returning visitors. Analytics data is processed on infrastructure outside the UK/EEA; transfers are covered by appropriate safeguards (see Section 8).
Legal basis (UK GDPR / GDPR): Consent (Article 6(1)(a)).
2.2 Advertising
Simple CV is kept free by showing non-intrusive advertisements. Our advertising partners may:
- Set cookies on your device to serve relevant ads and measure their performance
- Collect your IP address and browser information to manage ad frequency
- Use interest-based advertising based on browsing behaviour across sites (you can opt out — see Section 6)
Your CV content is never shared with advertisers or used to target ads. Ads are contextual and based on general audience data collected by the ad network — not on anything you type into the builder.
Legal basis (UK GDPR / GDPR): Consent (Article 6(1)(a)) for personalised advertising; Legitimate interest (Article 6(1)(f)) for non-personalised advertising.
2.3 Your CV data
Everything you type into the builder — your name, contact details, work history, education, skills, and any other personal information — is stored exclusively in your browser's localStorage. This data:
- Never leaves your device
- Is never transmitted to our servers
- Cannot be accessed by us under any circumstances
- Is deleted when you clear your browser data or remove it manually within the app
Because we have no access to this data, we cannot fulfil data subject access or deletion requests for CV content — you are the sole controller of that data and can manage it directly in the app.
2.4 Hosting and infrastructure
Simple CV is a static web application. Our hosting provider may log standard server access information (IP address, request path, timestamp) for security and operational purposes. These logs are retained for a maximum of 30 days and are not used for any other purpose.
3. Cookies we use
| Name | Purpose | Category | Duration |
|---|---|---|---|
simplecv_consent |
Stores your cookie consent choice (localStorage entry — not a cookie) | Essential | Persistent |
| Analytics session cookie | Recognises returning visitors for analytics reporting | Analytics | 1 year |
| Ad network cookies | Ad serving, frequency capping, and performance measurement | Advertising | Varies by network |
If you decline analytics via our consent banner, only the essential simplecv_consent localStorage entry is written. No analytics or advertising cookies are placed without your consent.
4. Data sharing
We do not sell your personal data. We share data only with:
- Our analytics provider — for the purposes described in Section 2.1
- Our advertising partners — for the purposes described in Section 2.2
- Our hosting provider — to serve the website (access logs only)
- Authorities — where required by law or to protect the rights, property, or safety of Simple CV or its users
5. Data retention
- Analytics data: Retained by our analytics provider per their own data retention policy.
- Advertising data: Retained by advertising partners per their own policies.
- Server access logs: Up to 30 days.
- Your CV data: Stored on your device indefinitely until you delete it. We hold no copy.
6. Your rights
Under UK GDPR and GDPR (if applicable), you have the right to:
- Access — request a copy of personal data we hold about you
- Erasure — request deletion of your personal data
- Restriction — request we limit how we process your data
- Objection — object to processing carried out on the basis of legitimate interest
- Portability — receive your data in a structured, machine-readable format
- Withdraw consent — at any time, without affecting the lawfulness of prior processing
- Lodge a complaint — with a supervisory authority (see Section 7)
To exercise any of these rights, email privacy@simplecv.io. We will respond within one month. Note: because your CV content is stored only on your device, we cannot fulfil access or deletion requests for it.
Opt out of interest-based advertising
You can manage interest-based advertising preferences through your browser settings, or by using your browser's privacy controls or an appropriate browser extension. Most advertising networks also provide their own opt-out mechanisms accessible via their privacy policies.
Opt out of analytics
Withdraw your analytics consent at any time by clearing simplecv_consent from your browser's localStorage for simplecv.io, then declining when the consent banner reappears. The Do Not Track (DNT) browser signal is also respected — analytics will not be activated if DNT is enabled.
7. Right to complain
If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant supervisory authority:
- UK: Information Commissioner's Office (ICO) — ico.org.uk/make-a-complaint
- EU/EEA: The data protection authority in your country of residence
We would appreciate the opportunity to address your concerns directly before you approach a supervisory authority — please contact us first at privacy@simplecv.io.
8. International data transfers
Some of our service providers process data outside the UK and EEA. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions) before any transfer takes place.
9. Children's privacy
Simple CV is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
10. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will always reflect the most recent revision. Material changes will be signalled by a notice on the landing page. Continued use of Simple CV after a change constitutes acceptance of the updated policy.
11. Contact
Questions about this policy? Email privacy@simplecv.io.
This policy applies to the Simple CV web application at simplecv.io. It does not apply to third-party websites linked from Simple CV.