Privacy
CVBurst is built so that your personal data stays with you. In short: no account, no server storage of your CV, no advertising or tracking cookies.
Who runs CVBurst
CVBurst (cvburst.com) is run by Leart Shabani, who is responsible for the processing described on this page. For any privacy question or request, write to leartshabani77@gmail.com.
Your CV stays in your browser
Everything you type into the editor – including your photo – is saved only in your own browser's local storage on your device. It is not sent to or stored on our servers. If you clear your browser data, use a private window or switch devices, the saved CV is not available there. Use Download → Save project (.json) to keep your own backup.
PDF downloads
When you download or share a PDF, the current CV page is sent over an encrypted connection to our PDF service (Amazon Web Services, EU – Frankfurt region), converted into a PDF file and returned to you. The CV is processed in memory only and is not stored or shared. Only technical metadata needed to run the service (such as the time and size of the request) is logged, without the content of your CV. If the PDF service is unavailable, your browser's own print dialog is used instead and nothing leaves your device.
Importing a CV
Imported PDF, Word, text and image files – including photos and scans read with text recognition (OCR) – are processed directly in your browser. They are not uploaded. The text-recognition files are served from cvburst.com itself, not from a third party.
Sharing and copying
Share hands your file to your device's own share menu, and Copy as text puts your CV on your clipboard. Where it goes next – WhatsApp, e-mail, Google Drive or any other app – is your choice, and that app's own privacy policy applies. CVBurst does not see or keep what you share.
Services that process data
CVBurst uses a small number of providers to run the website. They process data only on our behalf and only as far as needed:
- Cloudflare, Inc. – hosting, content delivery, DNS and protection against abuse. Cloudflare processes technical data such as IP addresses and browser information to deliver pages. We also use Cloudflare Web Analytics, which counts page views without cookies and without identifying individual visitors.
- Amazon Web Services EMEA SARL – the PDF service described above, in the EU (Frankfurt).
Where data may be processed outside the EU/EEA (for example by Cloudflare's global network), the providers rely on the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. The domain is registered through Namecheap, which does not receive any visitor data.
Legal basis
We process technical data and PDF requests because it is necessary to provide the service you request and in our legitimate interest in running a secure, reliable website (Article 6(1)(b) and (f) GDPR).
How long data is kept
Your CV is never kept on our side. PDF requests are processed in memory and discarded immediately. The PDF service's technical logs, which never contain your CV, are deleted automatically after 7 days; Cloudflare keeps its own technical logs for a short period under its own policy. E-mails you send us are kept only as long as needed to answer them.
Cookies
CVBurst does not use advertising or tracking cookies. Local storage is used only to keep your CV and preferences (such as dark mode) on your device.
Your rights
You have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, and to data portability. Because we don't store your CV, there is usually no personal profile for us to look up – you can delete your CV at any time by clearing the site data for cvburst.com in your browser. For anything else, write to leartshabani77@gmail.com. You also have the right to lodge a complaint with a data protection supervisory authority.
Changes
If this policy changes, the updated version will be published on this page with a new date.