Privacy & cookies

CV Espresso is designed to collect as little data as possible: there are no accounts, your CV is written and laid out in your browser and is not kept on our servers. Here is exactly what data passes through the site, why, and for how long.

Who is the data controller

The data controller is Filippo Tommasi di Vignano. For any question about your data, write to support@cvespresso.com.

The CV you create

• It stays on your device. What you write in the editor, including your photo and cover letter, is saved in your browser’s storage (localStorage) so you don’t lose your work if you close the page. We never receive it. You can delete any CV from “My CVs” or clear this site’s data in your browser.
• Import. The Word or PDF file you import is read in your browser and is not sent to the server.
• PDF. The PDF is created by your browser’s print function: the document does not go through the server.
• Word and backup. To create the .docx file, or the backup file of your CVs, the document is sent to our server, which assembles it and sends it straight back as a download. The content is neither stored nor logged.

The contact form

If you write to us, we receive by email your name, email address, topic and message, together with the date and your browser type (useful to understand a technical problem). We use them only to reply to you, on the basis of your request (Art. 6(1)(b) GDPR), and keep them in our mailbox for as long as needed to handle it, for 12 months at most. The message is not stored on the site.

Technical data and security

Like any website, the server records technical data about requests (IP address, date and time, requested page, browser) in the logs of the hosting provider (Aruba S.p.A.), who processes them under its own privacy notice. To protect the site from abuse, we keep for at most 24 hours a counter of requests sent to the server (creating Word files, sending the form, updating the statistics), linked to an encrypted fingerprint of the IP address rather than the address itself. If a page fails, your browser sends us a technical description of the error (never the content of your CV), which we keep for at most 90 days to fix the problem. The legal basis is our legitimate interest in keeping the site secure and working (Art. 6(1)(f) GDPR).

Anonymous statistics

To understand whether the site is useful, we count day by day how often the main pages are opened and the features are used: CVs downloaded as PDF or Word, imports that worked or failed, the example being loaded, the AI prompt being copied. We record only these totals: no IP address, no cookies, nothing that could identify who used the site, and never the content of a CV. We keep them for at most 13 months, on the basis of our legitimate interest in improving the service (Art. 6(1)(f) GDPR).

Cookies and browser storage

We only use technical tools that the site needs to work, which do not require consent:

• lang: a cookie that remembers your language (English or Italian), lasting 12 months.
• cve-archivio: browser storage holding your CVs, their design and cover letters, until you delete them.
• cve-guida, cve-caffe: browser storage remembering whether you closed the guide and when we last suggested buying us a coffee, so we don’t ask too often.

We use no tracking cookies and no third-party analytics. If we ever add advertising or analytics, we will update this page and ask for your consent before turning them on.

External services

The “Buy us an espresso” button leads to an external donation page: the site loads nothing from that service until you click it, and from then on its own privacy notice applies. Fonts, the libraries that read Word and PDF files, and every other file of the site are hosted on our server: the page does not contact other sites.

Your rights

You can ask to access, correct or delete your data, restrict or object to its processing, and receive it in a readable format (Articles 15-22 GDPR), by writing to support@cvespresso.com. If you believe the processing is not lawful, you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, garanteprivacy.it) or with the authority in your country.

Changes

If the way the site works changes, we will update this page and the date at the top.