Privacy disclosure
In general, we work really hard to maintain your privacy. This page describes what happens to your resume and to information about your visit.
Your file
- Your PDF is processed in memory for one request and is discarded when that request ends.
- We do not store your file or the text in it. From its metadata we keep only the name of the program that made it so we can make some pretty graphs with inferences about which tools are most common and error frequencies per tool. Data!
- The name of your file is checked in your browser and is not sent to the server.
- To mark problems on a picture of your page, the server draws up to the first 4 pages of your PDF as pictures. They are sent back in the same answer and are not stored.
- Between your first and second pass, the page keeps your file and its report in your browser's memory, so that it can compare them with the PDF you bring back. Closing the tab or pressing Start over clears them. Nothing is saved in your browser's storage.
Your visit
- The site sets no cookies and loads nothing from other companies.
- The older page at /resfix/ has a light or dark button. If you use it, your browser remembers that choice until you close the tab. The choice stays in your browser and is not sent to the server.
- The hosting platform keeps a standard request log for 30 days. Each line holds your IP address, the name of your browser, the time, and the address that was requested.
- That log never contains your file, its name, or anything in it. We do not store your file at all, so there is no resume on our side to connect to an IP address.
- To limit abuse, the server also holds a scrambled form of your IP address in memory. It is never written to disk. It is forgotten after a minute for the per-minute limit, and at the end of the day (UTC).
- Before each resume check, your browser spends a moment on a small calculation set by the server as a security measure intended to limit bot access. This makes it expensive to flood the service with automated requests. Your browser sends only the answer. It does not identify your browser, and once validated it is forgotten. Only a random code from the calculation is kept for five minutes, so the same answer can't be used twice.
If you send a commercial inquiry
- The form behind “inquire here” is the one part of the site that sends the information you enter outside of your session. Your name, email address, company and message are sent via email so we can reply.
- The message is delivered by Resend (resend.com), an email delivery service. Resend keeps a copy of each message it delivers under its own privacy policy.
- The server doesn't store the message or write any of it to its log. The log line says only that a message was sent. Inquiries are not part of the usage counts.
- The form uses the same security calculation, hidden field and limits as a resume check.
What we do keep
- We keep anonymous counts to improve the tool. Examples are which app made a PDF, which problems were found, and which fixes were chosen.
- The counts contain no text from your resume, no IP address and nothing that identifies you.
- We keep the counts apart from the request log and we do not match one against the other.