Your data
Where the information in your CV goes, in short.
Your CVs
Your CVs are stored on the PixeCV server, linked to an account. There are two kinds.
Without an account
- Only one CV is kept, linked to a technical account with no name or email address, created when the editor opens.
- This account and its CV are deleted from the server after 30 days without activity. Until then, a sign-in cookie, which is not used to track you, links them to this browser: you find them again even after closing the browser.
- In private browsing, the browser forgets this cookie when it closes: the CV can then no longer be found. If a change is not saved yet, the browser asks you to confirm closing; this message comes from the browser, and we cannot change it.
- To delete it at any time: “Delete this CV from this browser”, on the “Your CV is waiting” screen. Changing browser or deleting its cookies also makes it impossible to find. Saving a CV to a file is for accounts only.
With an account
- You create this account with your email address. Your CVs, up to 20, are kept until you delete them, and you find them wherever you sign in.
- The last 30 versions of each CV are kept, so you can go back; they are deleted with the CV.
- On a browser where you are signed in, the session stays open for 30 days after your last visit.
- A CV created before the account joins it when you first sign in.
- “My CVs” lets you create, duplicate, rename and delete them, save them to a file and import that file elsewhere.
- “Delete my account and my CVs” (in “My CVs”) permanently deletes your account, all your CVs and your sessions from the server.
Who can see them
The PixeCV team can view your CVs and your activity (creation, name changes, downloads with the name written on the CV) to help you and to fight abuse.
Account and sign-in
- We keep your email address, a fingerprint of your password (never the password itself, which we cannot read), the date of your last visit and, if you sign in with Google, the Google ID of your account, your first and last name and your profile photo.
- The 6-digit code used to create an account, to sign in without a password or to choose a new one is valid for 10 minutes. It is sent by Resend, an email delivery service, which receives your address and the message. We only keep a fingerprint of it.
- With “Continue with Google”, Google confirms your identity and gives us your email address, your first and last name and your profile photo. They are only used to pre-fill your new CVs (the photo is offered, never added without you) and are deleted with your account.
- A new CV also reuses the contact details and photo of your last CV; you can change everything.
- An account created with an address and a password, then opened with Google: the password is removed, your CVs stay.
- “Sign out” closes the session on this browser: your CVs stay in your account.
The PDF
- The PDF is made from the CV saved on our server: “Download as PDF” sends no text or photo, it only asks for the file.
- The PDF itself is not kept. The server log only records the time of the request, its result, its duration and the number of pages.
- If a page runs into an error, your browser sends us the error message, the page address and the browser name, kept for 30 days, without the text of your CV.
Artificial intelligence suggestions
- For French CVs, “Suggested phrases” shows ready-made phrases, built into the site: showing them does not send your text.
- Artificial intelligence (AI) help is optional and not always available. Without it, no text is sent to an AI service.
- In demo mode, a banner says so: the suggestions are examples, produced without calling an AI service.
- No text goes to the AI until you click one of its buttons.
- If you use it, the job title and the text of the section go through our server, then through a partner artificial intelligence service. What is sent may also include the CV title, your instructions and the wording to avoid; for the profile and skills, your job titles, your skills and your qualifications.
- The name, contact details and photo in your personal details are never sent. Our server masks the email addresses, links and phone numbers it recognises: avoid writing other personal information.
- Our server does not write these texts to its log.
What we do not do
- No advertising, no trackers. The sign-in cookie is only used to recognise you.
- Fonts are served by the site itself, without calling any outside service.
- Audience measurement uses no cookies: an anonymous fingerprint, renewed every day, counts visits, and no address is kept.
- Country estimated from the IP address using the IP to Country Lite database from DB-IP (db-ip.com), under the CC BY 4.0 licence; the address is not kept.