Privacy & cookies

CV Espresso is designed to collect as little data as possible: there are no accounts, your CV is written and laid out in your browser and is not kept on our servers. Here is exactly what data passes through the site, why, and for how long.

Who is the data controller

The data controller is Filippo Tommasi di Vignano. For any question about your data, write to support@cvespresso.com.

The CV you create

• It stays on your device. What you write in the editor, including your photo, is saved in your browser’s storage (localStorage) so you don’t lose your work if you close the page. We never receive it. You can delete it at any time with “New CV” or by clearing this site’s data in your browser.
• Import. The Word or PDF file you import is read in your browser and is not sent to the server.
• PDF. The PDF is created by your browser’s print function: the document does not go through the server.
• Word. To create the .docx file, the laid-out document is sent to our server, which assembles it and sends it straight back. The content is neither stored nor logged.

The contact form

If you write to us, we receive by email your name, email address, topic and message, together with the date and your browser type (useful to understand a technical problem). We use them only to reply to you, on the basis of your request (Art. 6(1)(b) GDPR), and keep them in our mailbox for as long as needed to handle it, for 12 months at most. The message is not stored on the site.

Technical data and security

Like any website, the server records technical data about requests (IP address, date and time, requested page, browser) in the logs of the hosting provider (Aruba S.p.A.), who processes them under its own privacy notice. To protect the site from abuse, we keep for at most 24 hours a counter of requests to create Word files and to send the form, linked to an encrypted fingerprint of the IP address rather than the address itself. If a page fails, your browser sends us a technical description of the error (never the content of your CV), which we keep for at most 90 days to fix the problem. The legal basis is our legitimate interest in keeping the site secure and working (Art. 6(1)(f) GDPR).

Cookies and browser storage

We only use technical tools that the site needs to work, which do not require consent:

• lang: a cookie that remembers your language (English or Italian), lasting 12 months.
• cve-cv, cve-stile: browser storage holding your CV and the design you chose, until you delete them.
• cve-guida, cve-caffe: browser storage remembering whether you closed the guide and when we last suggested buying us a coffee, so we don’t ask too often.

We use no tracking cookies and no third-party analytics. If we ever add advertising or analytics, we will update this page and ask for your consent before turning them on.

External services

The “Buy us an espresso” button leads to an external donation page: the site loads nothing from that service until you click it, and from then on its own privacy notice applies. Fonts, the libraries that read Word and PDF files, and every other file of the site are hosted on our server: the page does not contact other sites.

Your rights

You can ask to access, correct or delete your data, restrict or object to its processing, and receive it in a readable format (Articles 15-22 GDPR), by writing to support@cvespresso.com. If you believe the processing is not lawful, you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, garanteprivacy.it) or with the authority in your country.

Changes

If the way the site works changes, we will update this page and the date at the top.