Legal
Cookie Policy
Last updated October 5, 2026
This policy explains the cookies and similar technologies ResumeGrok uses, why we use them and how you can control them. It supplements our Privacy Policy.
1. What cookies are
Cookies are small text files that a website stores in your browser. Similar technologies, such as local storage, keep data on your device too; in this policy we call them all cookies. First-party cookies are set by the site you're visiting; third-party cookies are set by another company's service.
2. How we use cookies
Strictly necessary: needed for things you ask for — signing in and staying signed in, protecting the service (for example against forged requests), remembering your language and theme, and remembering your cookie choice. These can't be switched off in our settings. You can block them in your browser, but then sign-in won't work.
Preferences: remember layout choices on this device, such as whether the sidebar is collapsed, the resume preview zoom and your applications view. We use them only if you allow them.
Analytics: Google Analytics, to understand which pages are visited and how the site is used. It runs only if you allow it: until then nothing is loaded from Google. We have switched off its advertising features, and it isn't used on shared resume pages or PDF exports.
Advertising and marketing: we don't use advertising, retargeting or cross-site tracking cookies.
3. The cookies we use
This table lists every cookie and similar technology ResumeGrok uses. Durations are maximums; "session" means the cookie is deleted when you close your browser. On secure (HTTPS) connections some sign-in cookie names start with __Secure- or __Host-, and a long session cookie may be split into numbered parts (.0, .1).
| Name | Set by | Purpose | Category | Duration |
|---|---|---|---|---|
| rg_consent | ResumeGrok | Remembers your cookie choices | Strictly necessary | 12 months |
| NEXT_LOCALE | ResumeGrok | Remembers the language you choose | Strictly necessary | 12 months |
| next-auth.session-token | ResumeGrok | Keeps you signed in (encrypted session) | Strictly necessary | 7 days, renewed while you use the app |
| next-auth.csrf-token | ResumeGrok | Protects sign-in and sign-out against forged requests | Strictly necessary | Session |
| next-auth.callback-url | ResumeGrok | Returns you to the page you were on after signing in | Strictly necessary | Session |
| next-auth.state, next-auth.pkce.code_verifier | ResumeGrok | Secures the sign-in handshake with our sign-in service | Strictly necessary | 15 minutes |
| AUTH_SESSION_ID, KC_AUTH_SESSION_HASH, KC_RESTART | ResumeGrok sign-in service | Keep track of a sign-in or sign-up in progress and let it restart safely | Strictly necessary | Session |
| KEYCLOAK_IDENTITY, KEYCLOAK_SESSION | ResumeGrok sign-in service | Keep your sign-in session so you don't have to enter your password on every visit | Strictly necessary | Session, or up to 30 days if you choose "Remember me" |
| KEYCLOAK_REMEMBER_ME | ResumeGrok sign-in service | Remembers your email address on the sign-in form, only if you choose "Remember me" | Strictly necessary | 12 months |
| KEYCLOAK_LOCALE | ResumeGrok sign-in service | Remembers the language you pick on the sign-in pages | Strictly necessary | Session |
| theme (local storage) | ResumeGrok | Remembers the light or dark theme, only when you pick one | Strictly necessary | Until you clear it |
| rg-ui (local storage) | ResumeGrok | Remembers whether the sidebar is collapsed | Preferences | Until you clear it or withdraw consent |
| rg-preview-zoom (local storage) | ResumeGrok | Remembers the resume preview zoom | Preferences | Until you clear it or withdraw consent |
| rg-apps-view (local storage) | ResumeGrok | Remembers the board or list view for applications | Preferences | Until you clear it or withdraw consent |
| Razorpay or Stripe cookies | Razorpay or Stripe (third party) | Process your payment and prevent fraud, only when you pay | Strictly necessary | Set by the provider |
| Google cookies | Google (third party) | Sign you in with Google, only if you choose it | Strictly necessary | Set by Google |
| _ga | Google Analytics, on our domain | Tells visits from different browsers apart, so visits can be counted without identifying you | Analytics | 2 years |
| legal.cookies.table.rows.17.name | Google Analytics, on our domain | Keeps track of the current visit (session) for the analytics count | Analytics | 2 years |
4. Changing your choices
You can change your choice at any time in Cookie settings — use the button below or the link at the bottom of every page. Refusing optional cookies doesn't limit what you can do in ResumeGrok. When you refuse or withdraw consent, we delete the preference data and the Google Analytics cookies stored in your browser. We ask again when our cookie categories change, and at least every 12 months.
5. Global Privacy Control
If your browser sends a Global Privacy Control (GPC) signal, we treat it as a refusal of all optional cookies and don't show the cookie banner. You can still turn on preferences or analytics yourself in Cookie settings.
6. Browser controls
Most browsers let you view, delete and block cookies and site data in their settings, and offer private browsing. If you block strictly necessary cookies, signing in won't work. Your browser's help pages explain how.
7. Payments and Google sign-in
When you pay, the payment window or page is provided by Razorpay or Stripe, which may set their own cookies to process the payment and prevent fraud. When you sign in with Google, Google sets cookies on its own domain. These companies control those cookies under their own policies; we can't read them.
8. Changes to this policy
We'll update this policy when the cookies we use change, and ask for your consent again when that's needed. The date at the top shows when it was last updated.
9. Contact
Questions about cookies or privacy: privacy@resumegrok.com