Privacy
In plain English, with no defined terms and no lawyer paragraphs. Every promise here is a mechanism in the product, not an intention — see the honesty contract for the rest.
Your uploaded file is never stored
When you upload a resume file, it is parsed to plain text in memory and the file itself is discarded immediately. It is never written to disk, never put in object storage, and never sent anywhere else. Only the extracted text is kept, and only for as long as your results link works.
What we actually store
For each check: the extracted resume text, your score and the issues we found, which model scored it, and a salted one-way hash of your IP address. If you unlock your top issues, we also store your email address and the time you gave it. That — plus one anonymous statistics row described below, and an account if you choose to create one — is the whole list.
A cookie remembers your browser, not you
The first time you run a check, we set a cookie holding a random id — not your name, not your email, not anything derived from you. Its only job is to keep the free tier fair on a shared connection: without it, everyone on one office or coffee-shop network would share a single allowance, because we’d have no way to tell you apart. It lasts about a year, and clearing it does not raise your limit — it just drops you back to sharing the connection’s allowance with whoever else is on it.
We never store your IP address
We store a salted hash of it, which we use only to apply the rate limits that keep the free tier affordable. The hash cannot be reversed back into your address, and we never use it to build a profile of you.
Everything expires after 30 days
A scheduled job hard-deletes checks older than 30 days — the row is removed, not flagged as hidden. After that your results link stops working, because there is genuinely nothing left behind it.
You can delete everything immediately
Every results page has a “Delete my data” button. It hard-deletes the row on the spot, with no confirmation email and no recovery window. You do not need an account, and you do not need to ask us.
An account is optional, and it unlocks nothing
You never need one. Checking a resume, seeing every issue, exporting the report, and buying the rewritten resume all work signed out, exactly as they always have — the private link on your results page is the only key any of that has ever needed, and signing in does not change that or take it away. An account exists so your checks are listed in one place across devices, and it is what a subscription would attach to if we ever sell one.
What an account stores
Your email address, the name and profile-picture URL your provider gives us if you use “Continue with Google”, and whether that address is verified. For each device you are signed in on, a session: a random token, when it expires, the browser and operating system it was created from, and — as everywhere else on this site — a salted hash of the IP address, never the address. If you sign in with Google we also keep the identifiers and tokens Google issues for that link. No passwords, because there are none to store. When we show that picture — in the corner of the site, or on your account page — we serve it through our own origin: your browser asks us for it and we fetch it, so Google is never contacted as you browse.
An account does not extend the 30 days
Saving a check to your account records that it is yours, and nothing else. The check still hard-deletes 30 days after you ran it, on exactly the same schedule as one nobody ever claimed. An account is a list of your checks, not a place they are kept — when the 30 days are up, the row is gone and the list is shorter.
Deleting your account really deletes it
It removes your user record, every session on every device, the sign-in links to any provider, and the mailing-list row for that address. Checks you had saved are unlinked rather than deleted — they were never resurrected by the account and are not destroyed by its removal, so they keep purging on their own 30-day clock, and you can still delete any of them on the spot from its results page. The one thing that stays is the record of a purchase: how much was paid, when, for which check, and the email address the payment was made with. That is a financial record — we are required to keep it, and it is what the weekly donation of Shabbat-window revenue is counted from — so we will not pretend it disappears. It is no longer attached to an account, and deleting the check itself takes its purchase row with it.
One anonymous statistic outlives your check
When a resume is scored, we also record a single aggregate row: the score numbers, a broad role family (like “data & analytics”), a career-length band, and the day. It contains no resume text, no identifiers, and no link of any kind back to your check — deleting your data leaves nothing it could be traced to, because it was never traceable. We collect these rows to publish honest statistics, like how scores are distributed by role.
Your resume text is sent to one AI provider
Scoring runs on Anthropic’s Claude API. Your resume text is sent there to be scored and is covered by their API terms, which do not permit training on it. No other third party ever receives your resume text.
Analytics without cookies
We measure how many people land, run a check, and unlock results — in aggregate, with a privacy-focused analytics tool that sets no cookies and builds no cross-site profile. There is no advertising tracker on this site, which is also why you never saw a cookie banner.
If you unlock your results, we email you your private link and keep your address so we can tell you about the product. We do not sell, rent, or share your address, and every email we send has a working unsubscribe link. Signing in sends you a code and nothing else: it is not consent to be marketed at, and it never re-subscribes an address that has already unsubscribed.
Questions, or a deletion request
Email support@skimproof.com. If you want data deleted and no longer have your results link, tell us the email address you used and we will remove it.