CV Workshop

Privacy policy

Last updated: September 2026

In short

CV Workshop consists entirely of static files. Everything you enter into your CV, including your photo, stays in your browser. The PDF is created on your device. No CV data is sent to the server. The site sets no cookies, uses no tracking or analytics, and embeds no third-party services, fonts or CDNs. There are no user accounts and no database.

Controller

Christian Reitbauer-Rieger, Bruck an der Mur, Austria
Email: datenschutz@404brainnotfound.at

Your CV data

The app's input fields do not submit anything. Your details are processed only locally: in your browser's memory, when the preview is drawn and when the PDF is created. An uploaded photo is cropped and resized in the browser and never leaves your device either.

Local browser storage

So your CVs are still there next time, they are saved in your browser's localStorage, together with your chosen language. This is not a cookie: the data is never sent to the server and is only available on this device in this browser. You can delete individual CVs in the app or clear all data at any time through your browser settings.

When you save a CV as a file or download a PDF, the file is created directly in your browser and saved on your device. Opening a saved file also reads it locally only.

Server log data

When this website is accessed, the web server automatically records technical access data:

Purpose: keeping the site running, troubleshooting, and defending against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Retention: as a rule no longer than 30 days. This data contains no CV content, is not combined with other sources and is not used to identify individual people.

Hosting

The site is hosted with a provider inside the European Union. That provider processes the log data described above as a processor within the meaning of Art. 28 GDPR.

Fonts and third-party content

All fonts, including those embedded in the PDF, are served from this site's own server. No connection is made to Google Fonts or any other content delivery network. External links are only followed when you deliberately click them, at which point the privacy policy of that provider applies.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Please use the email address above. As your CV data lives only in your browser, we cannot access it. It stays under your control at all times.

You also have the right to lodge a complaint with the Austrian Data Protection Authority: dsb.gv.at.