Privacy Policy
Effective date: October 10, 2026 · Last updated: October 10, 2026
This Privacy Policy explains what personal data Best Resume Studio (“we”, “us”) collects when you use bestresume.online (the “Service”), why we collect it, how long we keep it, who we share it with and the choices and rights you have. If you have questions, email support@bestresume.online.
Summary
- To create an account we only record your email address (plus a securely hashed password, or your Google account ID if you sign in with Google).
- Resume content you choose to save to your account (My Profile and saved drafts) is encrypted at rest on our server. You can download it or delete it at any time.
- We do not sell your personal information for money. If advertising is enabled, Google may use cookies to show ads; personalized ads are only shown with your consent.
1. Information we collect
Account information
When you sign up with email and password we store your email address, a one-way hash of your password (Argon2id — we never store or see your actual password), whether your email is verified, and technical timestamps (account creation, last sign-in). When you sign in with Google, Google shares your email address, Google account ID, name and profile picture with us. We store only your email address and Google account ID; your name and picture are discarded and not saved.
Google profile
We use the Google account ID solely to recognize you the next time you choose “Continue with Google”. We do not access your Google contacts, Gmail, Drive or any other Google data.
Profile and resume data
If you use My Profile or save a draft to your account, we store the resume content you enter, which can include your name, contact details, city and state, work history, education, skills, links and an optional photo or logos. This content is encrypted at rest and is used only to show it back to you in the builder. Drafts you do not save to your account stay in your own browser (local storage) and are not sent to us.
Usage information
To apply the free daily limit we record which templates you open and on which day (UTC).
Cookies, local storage and sessions
We use an essential session cookie to keep you signed in and protect forms against cross-site request forgery, and your browser’s local storage to remember preferences (language, theme), drafts and your cookie choices. Advertising cookies are described below and in our Cookie Policy.
Logs and security records
Like most websites, our hosting provider records standard server logs (IP address, browser type, page requested, time) for security and operations. Our application keeps a short-lived record of sign-in, sign-up and password-reset attempts (IP address and a one-way hash of the email address) to stop abuse; these records are deleted automatically after 24 hours. Our own application error logs do not contain email addresses or tokens.
Password safety check
When you choose a password we check whether it appears in known data breaches using the Have I Been Pwned “range” service. Only the first five characters of a one-way hash of the password leave our server; your password and email are never sent.
Emails you send us
If you contact support, we keep your message and our reply to help you.
2. How we use information and legal bases
| Purpose | Data | Legal basis (EEA/UK) |
|---|---|---|
| Create and secure your account, sign you in, send verification and password-reset emails | Email, password hash or Google account ID, session cookie | Performance of a contract |
| Save, show and export your profile and resume drafts | Profile and resume content | Performance of a contract |
| Apply the free daily template limit | Template usage per day | Performance of a contract |
| Prevent fraud, abuse and attacks; keep the Service running | IP address (24 hours), hashed email, server logs | Legitimate interests |
| Show advertising (if enabled) and measure it | Cookies and device identifiers used by Google | Consent (personalized ads); legitimate interests for limited, non-personalized ads where allowed |
| Answer support requests; comply with law | Your messages; records required by law | Legitimate interests; legal obligation |
We do not use your resume content for advertising, and we do not use automated decision-making that has legal or similarly significant effects on you.
3. How long we keep data
- Account, profile and saved drafts: until you delete them or your account.
- Sign-ups never confirmed by email: deleted automatically after 7 days.
- Sign-in sessions: end after 7 days without activity and after 30 days at most.
- Rate-limit records with IP addresses: 24 hours.
- Verification and reset links: expire after 24 hours and are purged afterwards.
- Server backups kept by our hosting provider may contain deleted data for a limited time until they are overwritten.
4. Who we share data with
We share personal data only with service providers that help us run the Service, under agreements that limit their use of it:
- Hostinger — web hosting, database and email delivery.
- Google Sign-In — if you choose “Continue with Google”. Google’s processing is described in the Google Privacy Policy.
- Google AdSense — if advertising is enabled on the site (see section 5).
- Have I Been Pwned — anonymous password breach check (see above).
We may disclose information if required by law or to protect the rights, safety and security of our users and the Service. If the Service is transferred to a new owner, this policy will continue to apply to your data.
5. Advertising and Google AdSense
We may show ads served by Google AdSense to keep the Service free.
- Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites.
- Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
- You may opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors’ use of cookies for personalized advertising at www.aboutads.info.
- Learn how Google uses information from sites that use its services: policies.google.com/technologies/partner-sites.
Before you make a choice in our cookie banner, advertising and analytics storage is denied by default (Google Consent Mode). If you accept advertising cookies, Google may show personalized ads; if you reject them, only non-personalized ads may be shown, which Google may still use limited cookies or identifiers for, such as frequency capping and fraud prevention, where the law allows. You can change your choice any time via Cookie settings in the footer. We also honor the Global Privacy Control (GPC) browser signal as a request to opt out of personalized ads.
6. Your rights and choices
Depending on where you live, you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability and to withdraw consent at any time. You can exercise most rights yourself:
- Access and portability: My Profile → Download my data gives you a copy of your account data, profile and saved drafts (JSON).
- Correction: edit your profile and drafts at any time.
- Deletion: My Profile → Delete my account permanently deletes your account, profile, drafts and usage records. You can also request deletion by emailing support@bestresume.online from your account email address.
- Cookies and ads: use Cookie settings in the footer, Google Ads Settings or your browser settings.
We respond to requests within 30 days (45 days where US state law allows). We may need to verify that a request comes from the account owner. You will not be discriminated against for exercising your rights.
7. Notice to US residents (including California — CCPA/CPRA)
In the last 12 months we collected these categories of personal information: identifiers (email address, Google account ID, IP address), customer records you provide (resume content), and internet or network activity (server logs, template usage). We do not draw inferences or build profiles from your resume content. Sources: you, your browser and Google (if you use Google Sign-In). Purposes are described in section 2.
Do Not Sell or Share My Personal Information. We do not sell personal information for money. If advertising is enabled, allowing Google to use cookies for personalized (cross-context behavioral) advertising may be considered “sharing” under California law. You can opt out at any time by choosing Reject or turning off Personalized advertising in Cookie settings (footer), or by enabling Global Privacy Control in your browser. We do not knowingly sell or share the personal information of consumers under 16. We do not use or disclose sensitive personal information for purposes other than providing the Service.
You may use an authorized agent to make a request; we may ask for proof of authorization and to verify your identity.
8. Notice to users in the EEA, UK and Switzerland
Best Resume Studio is the controller of your personal data. Our service providers may process data outside your country, including in the United States; where required, transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses. You can lodge a complaint with your local data protection authority, but we would appreciate the chance to address your concern first at support@bestresume.online.
9. Security
We use HTTPS everywhere, hashed passwords (Argon2id), encrypted storage for profiles and drafts, strict browser security headers, CSRF protection and rate limits. No method of transmission or storage is 100% secure, but we work to protect your data and will notify you as required by law if a breach affects you.
10. Children
The Service is not directed to children under 13 (or under 16 in the EEA and UK), and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes to this policy
We may update this policy. We will change the “Last updated” date above and, for significant changes, notify signed-in users or show a notice on the site.
12. Contact
Best Resume Studio · Email: support@bestresume.online