Cookie and Tracking Policy
Operated by Jaspin LLC · Effective
At a glance
SupaCV stores six things in your browser, and three of them are optional. All three optional ones belong to Microsoft Clarity, which records sessions.
Decline and Clarity never loads. It is not switched off after the fact; the script is not fetched at all.
We run no advertising cookies, no ad pixels, and no cross-site trackers. There is nothing here that follows you to another website.
This summary is for orientation only. The full text below is what actually applies.
This policy explains the cookies and similar technologies SupaCV uses, and how to change your mind at any time. Read it alongside the Privacy Policy, which covers everything else we collect.
1. Change your choice
Use the control below. It takes effect immediately and applies to this browser.
2. What these technologies are
Cookies are small text files a site stores in your browser. Related technologies do similar jobs: local storage and session storage keep values in the browser without sending them on every request, and session-replay tools record how a page is used.
A cookie is first-party when the site you are visiting sets it, and third-party when another company does. It is a session cookie when it disappears as soon as you close the browser, and persistent when it survives for a set time.
3. The categories we use
Strictly necessary
Sign-in, session security, and storing your cookie choice itself. These cannot be switched off through the control above, because without them you could not stay signed in and we would have nowhere to record that you declined.
Analytics
Understanding which features get used and where they break. Of the four measurement tools SupaCV runs, two store nothing in your browser at all, one stores a short-lived attribution value we set ourselves, and only Microsoft Clarity sets cookies. Clarity is the only one that requires consent, and the only one the control above turns on or off.
Functional
Interface preferences such as which view you last had open. These stay in your browser and are never sent to a third party.
Marketing and advertising
None. SupaCV sets no advertising cookies and runs no ad-network pixels or conversion trackers. If that ever changes we will update this policy and ask for consent before anything loads.
4. Every cookie and key we set
| Name | Set by | Category | What it does | Lasts |
|---|---|---|---|---|
sb-*-auth-tokenCookie | SupaCV (Supabase Auth) | Strictly necessary | Keeps you signed in and secures the session. Set as HttpOnly and Secure, so page scripts cannot read it. | Session, refreshed while you stay active |
supacv:cookie-consentLocal storage | SupaCV | Strictly necessary | Remembers whether you accepted or declined analytics cookies, so we stop asking. | Until you clear site data |
sc_first_touchSession storage | SupaCV | Analytics | Remembers which page and referrer brought you to the site, so a sign-up can be attributed to a source. Values are capped at 120 characters. | Until you close the tab |
_clckCookie | Microsoft Clarity | Analytics (consent required) | Identifies a returning visitor to Clarity so recordings can be grouped together. | Up to 12 months |
_clskCookie | Microsoft Clarity | Analytics (consent required) | Joins the page views in a single visit into one recording. | 1 day |
CLIDCookie | Microsoft Clarity | Analytics (consent required) | Set by clarity.ms to link the recording to the correct Clarity project. | Up to 12 months |
Two more measurement tools run without storing anything on your device. Vercel Web Analytics counts visitors using an identifier it discards within 24 hours, and strips query strings to a marketing-parameter allowlist before the measurement leaves your browser. Ahrefs Web Analytics measures our marketing pages in aggregate. Neither sets a cookie, so neither is consent-gated: there is no storage to consent to and nothing the control above could switch off.
5. What we deliberately do not use
- No Google Analytics and no Google Tag Manager. Our product analytics are first-party and stay in our own database.
- No advertising or retargeting pixels. No Meta pixel, no LinkedIn Insight tag, no Google Ads conversion tag.
- No Stripe cookies on this site. Payment happens on Stripe’s own hosted checkout page, so any cookies Stripe sets are set there, under Stripe’s domain and its own policy, not by supacv.com.
- No fingerprinting and no attempt to identify you across other websites.
6. How consent works here
On your first visit a banner asks whether to accept analytics cookies. Accept and Decline are presented with equal weight, side by side, with no dark pattern making one harder to reach than the other. Nothing requiring consent loads before you choose: Clarity stays unloaded while your choice is unset, rather than loading and being told not to report.
Declining does not disable our own product analytics, and the banner says so rather than implying otherwise. What declining changes is that those events are stored with no account attached, so nothing links them back to you.
You can change your choice at any time using the control in section 1, reachable from the footer of every page. Withdrawing consent is exactly as easy as giving it. Because Clarity cannot be unloaded from a page it has already begun recording, reload the page after switching to Decline if you want it to stop within the same visit.
Your choice is stored per browser. Clearing site data or moving to another device means you will be asked again.
7. Browser controls and opt-outs
Every major browser lets you block or delete cookies in its settings, and most offer a private mode that discards them when you close the window. Blocking strictly necessary cookies will stop you signing in.
Where the law requires it, we treat an opt-out preference signal such as Global Privacy Control as a valid opt-out for the browser sending it. You can also read about Microsoft Clarity in Microsoft’s privacy statement.
8. Changes to this policy
Our stack changes, and this inventory changes with it. We post the updated version here with a new effective date, and where a change is material, such as adding a technology that needs consent, we will ask again before it loads.
9. Contact
Questions about cookies: privacy@supacv.com
Jaspin LLC
30 N Gould St Ste N
Sheridan, WY 82801
United States
Other policies
- Terms of ServiceThe contract between you and Jaspin LLC covering accounts, subscriptions, your content, AI output, and dispute resolution.
- Privacy PolicyWhat we collect, who receives it, how long we keep it, and the controls you have over all of it.
- Refund, Cancellation and Subscription PolicyHow billing, renewal, cancellation, trials, price changes, and refunds work on the Pro and Career plans.
- Acceptable Use PolicyWhat you may not do with SupaCV, including the line between tailoring a resume and falsifying one.
- Sub-processorsEvery third party that receives SupaCV data, what each one receives, and where it is processed.