Home / Privacy Policy

Privacy Policy

Last updated: 2026-10-09

cv.cm is a free set of browser tools and a short-lived cloud clipboard. This page explains what data the site handles, where it goes, and how long it stays.

Who runs cv.cm

cv.cm (https://cv.cm) is run by the cv.cm team. Email [email protected] for any privacy question or request. The source code is public at github.com/mantoufan/cvcm under the MIT License, so you can check how the site handles data.

Tools that run in your browser

Image, PDF, audio, text, data, and calculator tools process your input in the page with Web APIs. The files and text you open in them are not uploaded to our servers. Closing the tab discards them.

The same applies to game ROM or SWF files you load from your own device in the games player.

Cloud clipboard

The clipboard is the one feature that stores your content on our side. Note text is kept in our database on Cloudflare D1. Attached files are uploaded to our object storage at s3.cv.cm.

  • A note can no longer be opened after 10 views or 24 hours, whichever comes first. Expired notes and their files are then deleted in a later cleanup.
  • Anyone who has the link or the short code can open the note. There is no account, password, or public list of notes.
  • Text is limited to 64 KB and each file to 32 MB.
  • We do not read notes, except when we must review content reported for abuse or respond to a legal request.
  • Do not put passwords, ID numbers, or other sensitive personal data in a note.

IP addresses and abuse limits

To rate-limit the clipboard, the server stores a SHA-256 hash of your IP address with a request counter. It does not store the address itself, but we still treat the hash as personal data. It is used only for rate limiting and is deleted in a later cleanup, usually within a few hours.

The IP address page under Device shows your public IP to you only. It is read for that response and not stored.

Hosting and server logs

cv.cm is served by Cloudflare. To deliver and protect the site, Cloudflare processes request data such as IP address, browser user agent, and requested URL under its own privacy policy. Our storage server at s3.cv.cm keeps standard web server logs (IP address, time, requested path) for security and troubleshooting. We do not use these logs to build profiles.

Cookies and local storage

cv.cm sets one cookie, cvcm_locale, which remembers your language for one year. The same choice and a few tool settings (for example, portrait simulator presets) are kept in your browser's local storage. You can clear them in your browser settings at any time.

  • No advertising cookies.
  • No analytics scripts or third-party trackers.
  • No social media pixels.

What we do not do

We do not sell or rent personal data, do not share it for advertising, and do not use your content to train AI models. We share data only when the law requires it.

Children

cv.cm is a general audience site and is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has posted personal data in a note, email us and we will delete it.

Your rights

Depending on where you live, laws such as the GDPR, the CCPA, or China's PIPL may give you rights to access, correct, or delete your personal data. Because cv.cm has no accounts, we usually cannot link stored data to a person. If you want a note removed before it expires, send us its link. For other requests, email [email protected] and we will reply within 30 days.

Changes to this policy

If we change how cv.cm handles data, we will update this page and the date at the top. Material changes take effect when posted.

Contact

Privacy questions and requests: [email protected].

Terms of Service