Cookie Policy

1. Introduction

This Cookie Policy explains how Vimatech Ltd (Company Number 17001986) (“we”, “us”, “our”) uses cookies and similar tracking technologies on makeresume.io (the “Service”).

When you first visit the Service, a cookie consent banner asks for your preferences. Non-essential cookies are only placed with your explicit consent, and you can change or withdraw that consent at any time via the “Cookie Settings” link in the footer.

MakeResume runs on two hosts: the public site at makeresume.io and the application at app.makeresume.io. The choice you make on one is stored on the .makeresume.io domain and read by the other, so you are asked once and not again when you move between them. Section 3.3 describes how each host loads analytics, including a difference that existed on the application until September 2026.

This Cookie Policy should be read together with our Privacy Policy and Terms of Service.

2. What Are Cookies?

Cookies are small text files stored on your device (computer, tablet, smartphone) when you visit a website. They allow websites to recognize your device, remember your preferences, and improve your browsing experience.

Similar technologies include:

Local storage: Browser storage used to save data locally (e.g., session tokens)
Web beacons/pixels: Small graphic images used to track page visits
SDKs and APIs: Third-party software development kits (e.g., Google reCAPTCHA)

3. Types of Cookies We Use

We use the following categories of cookies:

3.1 Strictly Necessary Cookies

These cookies are essential for the Service to function and cannot be disabled. They enable core functionality such as:

Authentication: Keep you logged in and maintain your session
Security: Protect against CSRF attacks and unauthorized access
Load balancing: Distribute traffic across servers
Language preference: Remember the language you browse the Service in, so pages and the app are delivered in your language (mr_lang)
Cookie consent: Remember the cookie choices you made (cookie_consent)
Theme preference: Remember whether you chose the light or the dark interface (theme)

Examples: XSRF-TOKEN, makeresume_session, mr_lang, cookie_consent, theme

Legal basis: No consent is required for these. Storing something on your device is exempt from consent when it is strictly necessary to deliver a service you asked for, under regulation 6(4) of the Privacy and Electronic Communications Regulations 2003 in the UK and article 82 of the loi Informatique et Libertés in France. Remembering a language or a theme you selected yourself, and remembering the cookie choice you made, fall inside that exemption: they exist only because you expressed a preference, and they are not used to observe you.

3.2 Functional Cookies

The consent panel offers a “functional” category. On makeresume.io no cookie currently depends on it, because the only preferences we store, language and theme, are covered by section 3.1 above. The category is kept so that your choice carries over to app.makeresume.io, which uses it for the same kind of preference. If we ever place a functional cookie that genuinely needs your consent, it will be listed here first.

3.3 Analytics Cookies

We use Google Analytics 4 to understand which pages people arrive on, which features get used, and where the Service is failing. It sets _ga and related cookies and, in the process, your IP address reaches Google.

Legal basis: Consent. You give it through the banner and you can take it back at the same place.

On makeresume.io, the public site: the Google Analytics tag is not loaded at all until you accept analytics. Before that, no request leaves your browser towards Google Analytics, so neither the tag nor your IP address reaches Google. If you refuse, nothing is loaded. If you accept and later change your mind, analytics collection stops and the _ga cookies are deleted.

On app.makeresume.io, the application: since September 2026 the application behaves like the public site. Our server reads your choice before sending the page, and the Google Analytics tag is only included if you have already accepted analytics. Until that change, the tag was loaded on the first page you saw, before you had answered the banner. It wrote no analytics cookie and recorded no page view until you accepted, but loading it did disclose your IP address to Google before you had consented. We considered that a defect, and it is the reason for the change.

3.3.1 Measurement That Does Not Use Cookies

Separately from cookies, the application can report a small number of events to Google Analytics from our own servers, such as an export being produced. Because these are sent server side, they are not governed by the cookie rules but by the Privacy Policy, and they are subject to the same consent choice. See Privacy Policy, section 8.

3.4 Third-Party Cookies

We use third-party services that may set their own cookies:

Paddle: Payment processing and subscription management. See Paddle’s Privacy Policy.
Google Analytics: Analyzes how users interact with the Service (page views, user journeys, feature usage). Requires your consent. See Google’s Privacy Policy and Google Analytics Data Processing Terms.
Google reCAPTCHA: Spam and bot protection on our contact form. reCAPTCHA loads when you open the contact page, before and regardless of any analytics choice, because it is what stops the form being used to send automated abuse. It is limited to that page, and we rely on it being strictly necessary to provide a working contact form rather than on your consent. It does disclose your IP address to Google. If you would rather not use it, you can write to us at the postal address in section 7 instead.

We do not control these third-party cookies. Please review their privacy policies for more information.

3.5 Marketing Cookies (If Applicable)

Currently, we do not use advertising or marketing cookies. If we introduce them in the future, we will update this Policy and obtain your consent first.

Cookies can be classified by duration:

4.1 Session Cookies

Temporary cookies that are deleted when you close your browser. Used for authentication and session management.

4.2 Persistent Cookies

Remain on your device for a set period or until manually deleted. Used for preferences and analytics.

Cookie	Provider	Purpose	Duration
`makeresume_session`	MakeResume	Authentication & session	Session
`XSRF-TOKEN`	MakeResume	CSRF protection	Session
`mr_lang`	MakeResume	Language preference	1 year
`theme`	MakeResume	Dark/light mode	1 year
`cookie_consent`	MakeResume	Remember cookie preferences	1 year
`_ga`	Google Analytics	Distinguish users	2 years
`_gid`	Google Analytics	Distinguish users	24 hours
`_gat`	Google Analytics	Throttle request rate	1 minute

When you first visit the Service, you will see a cookie consent banner. You can:

Accept all cookies: Allow all non-essential cookies
Reject non-essential cookies: Only use strictly necessary cookies
Manage preferences: Choose which cookie categories to enable

You can change your preferences at any time by clicking the “Cookie Settings” link in the footer of any page. Refusing is offered in the same place, in the same form and with the same number of clicks as accepting.

Withdrawing consent. If you accepted analytics and then refuse, we stop the collection immediately and delete the _ga cookies already on your device. You do not have to reload the page or clear anything yourself.

How long your choice is kept. We store your answer for 12 months, then ask again. The French data protection authority recommends asking again at a shorter interval, and we have not yet decided whether to follow that recommendation.

5.2 Browser Settings

You can control and delete cookies through your browser settings. Most browsers allow you to:

Block all cookies
Block third-party cookies only
Delete cookies after each browsing session
View and delete existing cookies

For instructions, visit your browser’s help page:

Note: Disabling strictly necessary cookies may affect the functionality of the Service (e.g., you may not be able to log in).

5.3 Opt Out of Google Analytics

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

We may update this Cookie Policy from time to time to reflect changes in our use of cookies, legal requirements, or the Service. We will notify you of material changes by posting a notice on the Service or updating the “Last updated” date at the top of this page.

We encourage you to review this Cookie Policy periodically.

7. Contact Us

If you have questions about this Cookie Policy or how we use cookies, please use our contact form.

Company: Vimatech Ltd
Company Number: 17001986
ICO Registration: ZC155985
Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

The description of what is and is not loaded before consent was verified against the source code of both hosts on 18 September 2026. This page describes our cookie practices; it does not constitute legal advice.