Privacy policy

Last updated: September 2026

FreeShelf is a CV/resume builder that runs entirely in your web browser. This page explains, plainly, what that means for your data — because the honest answer is: almost nothing leaves your device.

There's no account, and no server storing your CV

FreeShelf doesn't ask you to sign up, and it doesn't have a backend database of user CVs. Everything you type — your name, work history, education, skills, and any photo you add — is processed and rendered entirely in your browser using JavaScript. It is never transmitted to FreeShelf's servers, because FreeShelf doesn't have a server component to send it to.

What's saved, and where

So that you don't lose your work if you close the tab, FreeShelf saves a copy of what you've typed to your browser's own local storage — a small storage area built into every browser, tied to this specific site and this specific device. Specifically:

• Your CV content and selected design, so it's there when you come back.
• Any designs you've marked as a favourite.
• If you use the job application tracker, the list of roles you've logged — company, role, status, applied date, an optional follow-up date, link and notes.

This data never leaves your browser. It is not synced to any account, not visible to FreeShelf, and not shared with any third party. You can see it for yourself in your browser's developer tools (Application → Local Storage), and you can erase it at any time by clearing your browsing data for this site, or by using a private/incognito window in the first place.

Photos

If you upload a photo, it's resized and processed locally in your browser (using an in-browser canvas) and stored the same way as the rest of your data — in local storage, on your device only. It is never uploaded to a server.

Cookies

FreeShelf does not use cookies.

Third-party requests

FreeShelf's pages make a small number of external requests, none of which ever include your CV content, form data, or anything you type:

• Google Fonts, to load the typefaces used across the site. This means your browser makes a direct request to Google's servers, which — like any web request — includes your IP address and some basic technical details (browser type, etc.). Google's own privacy policy governs how that request is handled; FreeShelf doesn't receive or store anything from it.
• Cloudflare Web Analytics, a cookieless, no-fingerprinting page-view counter, so we can see roughly how many people visit and which pages they land on. It doesn't use cookies, doesn't track you across other sites, and doesn't know or store anything about you individually — Cloudflare's own documentation covers how it works.
• Code libraries (JSZip, pdf.js and a QR code generator), loaded from a public code library (cdnjs) only on the main Studio page — JSZip builds the "Download as Word" file, pdf.js reads the text out of a PDF you upload with "Upload resume," and the QR code generator turns a URL you type into a scannable code, all entirely inside your browser. They're static script files — loading them doesn't send anything to cdnjs, and none of your Word file, your PDF's text, or the URL you enter for a QR code ever leaves your device except by your own download or by filling in the form on this page.

FreeShelf does not use advertising or cross-site tracking scripts of any kind, and no CV or cover letter content is ever sent anywhere by any of the above.

Children's privacy

FreeShelf isn't directed at children and doesn't knowingly collect personal information from anyone — children included — since it doesn't collect personal information from anyone at all, by design.

Changes to this policy

If what FreeShelf does with data ever changes — for example, if a future version adds optional cloud sync — this page will be updated first, and the change will be described plainly, the same way this page tries to.

Contact

Questions about this policy can be sent to gabrielgbr@hotmail.com.