Cookie Policy

Last updated: November 9, 2026

This translation is provided for information only; only the French version is legally binding.

Contents

What is a cookie?
Cookies used by CVpass
Third-party cookies
How to manage your cookies
Legal basis
Changes
Contact

1. What is a cookie?

A cookie is a small text file stored on your device (computer, smartphone, tablet) when you visit a website. It allows the site to remember information about your browsing (preferences, session identifiers, etc.) to make your future visits easier and the site more functional.

2. Cookies used by CVpass

Strictly necessary cookies

These cookies are essential for the website to function and cannot be disabled.

Cookie name	Provider	Purpose	Duration	Type
__clerk_db_jwt	Clerk	Authentication — secure session token	Session	Necessary
__session	Clerk	User session management	Session	Necessary
__client_uat	Clerk	Client authentication state	Session	Necessary
__cf_bm	Cloudflare (via Clerk)	Anti-bot protection	30 minutes	Necessary

Analytics cookies

These cookies let us measure site traffic with PostHog. They're only set if you accept them, and the measurement is linked to your account identifier if you're signed in.

Cookie name	Provider	Purpose	Duration	Type
ph_*	PostHog	Audience measurement — pages visited, clicks, visitor identifier linked to your account if you're signed in	No expiry date (browser local storage), until you clear the site's data	Analytics
cvpass_attr	CVpass	Remembers where your visit came from (campaign, landing page, referring site) so we know which channels lead to a purchase. No personal data.	30 days	Analytics

What PostHog receives: PostHog Inc. is a US company; the data is hosted in the European Union (Frankfurt) and kept for 12 months at most. If you accept these cookies, your browser sends it the pages you visit, your clicks (with the text of the button or link), the referring site and campaign, your device and browser type, and the country and city derived from your IP address, which is not kept. If you're signed in, this data is linked to your account identifier, your plan and, for a school account, the space and your role. Since November 9, 2026, neither your email nor your name is sent, and no session recording is made. Without your consent, your browser sends nothing to PostHog; our servers only send it usage events (sign-up, analyses, payments, errors) linked to your account identifier or, without an account, to a random identifier, with no email, name or IP address. To refuse or withdraw your consent: the “Manage my consent” button at the top of this page, then “Reject”. To object to the events sent by our servers: contact@cvpass.fr.

3. Third-party cookies

Only if you click “Accept” in the banner, CVpass uses advertising cookies from Google Ads, Meta (Facebook, Instagram), and TikTok. They measure how well our ads perform and show CVpass ads to people who have already visited the site. If you reject, none of these cookies are set and the Meta and TikTok pixels are not loaded; Google may only receive anonymous signals, without cookies or identifiers, to estimate overall sales from its ads. If you accepted and make a purchase, our servers also send that purchase to Meta (amount, currency, date and reference of the purchase, purchase page, hashed email address, browser type and advertising identifiers) to measure these ads.

During payment, Stripe may set security cookies on its own payment page (checkout.stripe.com) — these cookies are governed by Stripe's privacy policy.

4. How to manage your cookies

You can configure your browser at any time to accept or refuse cookies. Here's how to do it for the main browsers:

Google Chrome:Settings > Privacy and security > Cookies and other site data

Mozilla Firefox:Settings > Privacy & Security > Cookies and Site Data

Safari:Preferences > Privacy > Manage Website Data

Microsoft Edge:Settings > Cookies and site permissions > Manage and delete cookies

Important: disabling strictly necessary cookies (Clerk) will prevent you from signing in to your CVpass account.

5. Legal basis

Strictly necessary cookies

Exempt from consent under article 82 of the French Data Protection Act (Loi Informatique et Libertés, transposing the ePrivacy Directive), as they are essential to providing the service expressly requested by the user.

Analytics cookies (PostHog)

Set only if you accept them in the banner (consent, Article 82 of the French Data Protection Act and Article 6.1.a of the GDPR). You can withdraw that consent at any time with the “Manage my consent” button.

6. Changes

VertexLab reserves the right to modify this Cookie Policy. The date of the last update is shown at the top of this page.

7. Contact

For any question about the use of cookies on CVpass: contact@cvpass.fr

For more information about the processing of your personal data, see our Privacy Policy.