Privacy Policy
This policy describes exactly what ShitResume stores and what leaves your device. It is short because the product does very little: there is no account, and there is no server holding your resume.
Last updated September 11, 2026
The short version
- You do not create an account, and we do not ask for your name or email to use the builder.
- Your resumes are stored in your own browser's storage (IndexedDB) on your own device.
- There is no analytics, no advertising, no tracking pixels and no third-party marketing script on this site.
- Nothing about your resume is uploaded to a server we operate.
- If you use the optional AI features, you supply your own model provider API key, and requests go from your browser straight to that provider.
What is stored on your device
Everything the app needs to work is stored locally, in your browser, under this site's origin:
- Resumes — the full content of every resume you create, including any photo you add (stored inline as image data). Held in IndexedDB.
- AI provider settings — if you add an API key for the optional AI features, the key is stored in IndexedDB in your browser. It is sent only to the provider you configured.
- Interface preferences — theme, language and panel layout, stored in a cookie or local storage.
- Drafts and history — the builder keeps undo history for the resume you are editing, in memory and local storage.
We cannot read any of it, and we cannot recover it for you. Clearing your browser's site data, or uninstalling the browser, deletes it permanently. Export a PDF, DOCX or JSON backup if you want a copy.
Cookies
We set cookies only for functionality: remembering your theme, your language, whether the dashboard sidebar is open, and your builder layout. There are no advertising or analytics cookies, so there is no cookie consent banner to dismiss.
The optional AI features
The builder, all templates, the ATS check and PDF/DOCX export work with no key and no network access beyond loading the app itself.
If you choose to use the AI assistant, the ATS writing review, or AI resume import, you configure an OpenAI-compatible provider and API key yourself. When you use those features:
- Your browser sends the relevant resume text (and your instructions) directly to the provider you configured, using your key.
- We are not an intermediary: no request passes through a server we operate, and we never see your key, your content or the provider's reply.
- Whatever that provider does with the data is governed by their terms and privacy policy, not ours. Choose a provider you are comfortable with.
- You can remove a stored key at any time from Settings → AI Providers, which deletes it from your browser.
Hosting and server logs
This site is served as static files from a content delivery network. Like any web host, the network may process standard request data (such as your IP address and user agent) to deliver the files and to protect against abuse. We do not build profiles from it and it is not linked to any resume.
Children
The service is not directed at children under 16, and because we collect nothing personal, we hold no data about any user, including children.
Your rights
Data protection law gives you rights of access, correction, deletion, portability and objection over personal data a service holds about you. Because all content lives in your browser and we hold nothing, you exercise those rights directly: view and edit the data in the app, export it as JSON, and delete it by removing it in the app or clearing this site's browser data.
Changes to this policy
If a future version adds something that changes any statement above — for example a hosted AI service, or analytics — this page will be updated before that feature ships, and the date at the top will change.
Contact
Questions about this policy: [email protected]. Source code: github.com/techreone/resume-local-first.