1. Overview
GRAZ LABS LTD, Company Number: 16960808, with registered address at: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, trading as CVForge.
Effective date: 13 May 2026.
This Cookies Policy explains how CVForge uses cookies and similar technologies, including local storage, session storage, and browser-based tracking, when you use the CVForge website and app.
These technologies help the service function correctly, keep your account secure, and improve performance and reliability.
This policy reflects requirements under applicable data protection and privacy laws, including UK GDPR and PECR.
2. Types of technologies we use
Strictly necessary technologies: we use these for authentication and sign-in, session management, security and fraud prevention, checkout and billing flows, remembering cookie preferences and consent choices, and protecting account access. Under applicable law, these technologies may not require consent because they are necessary to provide the service you request. If you block them, parts of the service may not function correctly.
Storage used for requested features and workflows: we use local storage or session storage to save draft CV content, restore your work after navigation or checkout, preserve import, improve, cover letter, LinkedIn, and design workflow state, store preferences and settings, and maintain application state. Some of this storage is necessary for the feature you are using and may be stored in your browser until cleared.
Optional functional storage: where storage is not necessary for a requested workflow, it is controlled through the cookie consent tool where available.
Analytics and measurement technologies: we may use analytics technologies provided by us or trusted third-party providers to understand how features are used, identify issues or errors, and improve performance and reliability. Analytics and measurement technologies are only used if you provide consent through the cookie banner or consent settings tool.
We do not currently use advertising or marketing cookies.
We do not currently use cross-site advertising or behavioural tracking technologies.
Third-party providers such as payment providers like Stripe and social sign-in providers such as Google or Facebook may use their own cookies or storage technologies for fraud prevention, authentication, and billing or checkout functionality. These third parties may set their own cookies or storage technologies. We do not directly control third-party cookies or storage technologies set by external providers, and we recommend reviewing their policies.
3. Security and abuse prevention
We may use cookies, request data, and similar techniques to prevent spam or abuse, detect automated behaviour, enforce usage limits, and protect accounts and payments.
These measures are necessary for the safe operation of the service.
4. Duration of storage
Some technologies are session-based and are deleted when you close your browser.
Some technologies are persistent and remain until they expire or are deleted.
The cookie consent record is stored for the current policy version and may last up to 180 days unless you clear it sooner.
Local and session storage may remain on your device until cleared manually or automatically by your browser.
5. Your choices and controls
You can manage or delete cookies and storage through your browser settings.
Some browsers also allow you to clear local storage and site data separately from cookies.
You may also block cookies entirely, delete stored data, or restrict specific websites.
You can manage your preferences through the cookie consent tool available on the website, where you can accept or reject optional cookies.
You can withdraw or change your consent at any time.
Clearing browser storage may remove saved drafts, workflow progress, preferences, or locally stored application state.
Blocking strictly necessary technologies may prevent the service from working properly.
6. Updates
We may update this Cookies Policy to reflect changes to the technologies we use, third-party providers, or legal and regulatory requirements.
The latest version will always be available on the website. Where legally required, we will provide notice of material changes.
