Cookie Policy
1. Introduction
This notice provides transparent and complete information, based on Regulation (EU) 2016/679 (GDPR), Article 5(3) of the ePrivacy Directive (2002/58/EC) and Section 155(4) of Hungarian Act C of 2003 on Electronic Communications (Eht.), about which cookies and similar technologies skillion.hu uses, for what purpose and for how long, and how you can control them.
A cookie is a small text file stored by your browser on your device that the website can read back on later visits. In line with EDPB Guidelines 2/2023, this notice also covers technologies treated the same way as cookies, in particular the browser localStorage.
2. The data controller
Company name: Skillion Korlátolt Felelősségű Társaság (in short: Skillion Kft.)
Registered seat: 4244 Újfehértó, Kossuth L. u. 69., Hungary
Company registration number: 15-09-093995 (registered at the Company Court of the Nyíregyháza Regional Court)
Tax number: 32898987-2-15
Email: support@skillion.hu, info@skillion.hu
Website: https://www.skillion.hu/
(Hereinafter: Skillion Kft. or Service Provider.)
3. Categories and legal bases
- •Strictly necessary: technologies essential for providing the service you requested (login, session, language preference, storing your cookie decision). Legal basis: GDPR Art. 6(1)(b) (performance of a contract); they fall under the ePrivacy Art. 5(3) exemption, so no consent is required, which is why they cannot be switched off.
- •Analytics: anonymous visitor statistics (Umami). Runs only with your prior, explicit consent (GDPR Art. 6(1)(a)). Off by default.
- •External media (YouTube): embedded videos load only after your explicit click, the click constitutes your consent (GDPR Art. 6(1)(a)).
We use no pre-ticked boxes, scrolling or continued browsing does not constitute consent, and non-essential technologies do not load at all until consent is given.
4. Strictly necessary cookies
The following first-party (skillion.hu) cookies are required for the basic operation of the website:
| Cookie name | Purpose | Duration | Type |
|---|---|---|---|
| better-auth.session_token | Identifies your logged-in session | 30 days | Cookie (HttpOnly) |
| better-auth.session_data | Session cache (fewer database lookups) | 5 minutes | Cookie (HttpOnly) |
| better-auth.account_data | Account data cache | 5 minutes | Cookie (HttpOnly) |
| better-auth.dont_remember | Marks a non-persistent session when Remember me is off | Session | Cookie (HttpOnly) |
| better-auth.oauth_state | CSRF protection and PKCE during Google, Microsoft and Apple sign-in | About 10 minutes | Cookie (HttpOnly) |
| NEXT_LOCALE | Remembers your chosen language | 365 days | Cookie |
| skillion_cookie_consent | Stores your cookie decision (identifier, timestamp, categories, version) | 182 days (6 months) | Cookie |
In production (HTTPS) the better-auth cookies carry the __Secure- prefix (for example __Secure-better-auth.session_token) and are transmitted over encrypted connections only.
5. Functional local storage (localStorage)
The following data is kept in your browser localStorage (these are not cookies and are not transmitted to the server). They solely serve features you requested and are not used for analytics or marketing:
| Key | Purpose | Duration |
|---|---|---|
| webshop-cart | Preserves your webshop cart contents | Until deleted |
| generator-presets, generator-last-preset, generator-default-stars | Quiz and content generation presets and settings | Until deleted |
| skillion-quiz-export-config | Quiz PDF export settings | Until deleted |
| lastOpened | Remembers your last opened content | Until deleted |
| editorShowMenu | Editor sidebar state | Until deleted |
| mindmap-positions-* | Saves your mindmap layout per document | Until deleted |
6. Analytics (Umami): only with consent
For visitor statistics we use the open-source Umami software hosted on our own server (stats.skillion.hu). The Umami tracking script only loads if you consented to the Analytics category in the cookie banner.
- •Umami is cookieless: it sets no cookies and writes nothing to browser storage (localStorage, sessionStorage).
- •We do not store IP addresses: visitors are distinguished by an irreversible hash created with a daily-rotating key, from which the IP address cannot be recovered.
- •We only measure aggregate data: pages viewed, referrer, browser and device type, country.
- •The data stays on our own server, is not shared with any third party, and is not combined with any other processing.
- •We honor your browser Do Not Track signal even when you have consented.
7. Third parties: YouTube videos and payments
YouTube videos on the homepage and in study materials use a so-called two-click solution: by default only a preview image, served through our own server, is shown, and your browser does not communicate with any Google server. The video loads only after your click, from the privacy-enhanced youtube-nocookie.com domain.
When you start playback, YouTube (Google LLC) receives your IP address and details of the page you are visiting, and may set the following cookies and identifiers:
| Name | Purpose | Duration | Type |
|---|---|---|---|
| VISITOR_INFO1_LIVE | Bandwidth estimation and playback tracking | About 180 days | Cookie (third party) |
| YSC | Session-based interaction tracking | Session | Cookie (third party) |
| yt-remote-device-id and further yt-* keys | Persistent device identifier and player preferences | Persistent | localStorage (third party) |
Data may also be transferred to the United States. Google LLC is a certified participant of the EU-US Data Privacy Framework, and the transfer is additionally safeguarded by Standard Contractual Clauses (SCCs). Google privacy policy: https://policies.google.com/privacy
For payments you are redirected to the checkout page of Polar Software Inc. (our merchant of record) running on its own domain; Polar sets no cookies on skillion.hu. The data you provide during payment (name, email, billing details, IP address) is processed by Polar as an independent controller; see its privacy policy: https://polar.sh/legal/privacy
8. Managing, logging and withdrawing consent
On your first visit a cookie banner appears in which the Accept and Reject buttons are equally prominent, and the Settings button lets you decide per category. We use no pre-ticked boxes, non-essential categories are off by default, and scrolling or continued browsing does not constitute consent.
Your decision, including a refusal, is remembered for 6 months, after which we ask again. If this notice changes materially, we ask for your consent again.
You can withdraw or change your consent at any time, just as easily as you gave it: via the Cookie Settings item in the profile menu, the Cookie Settings link in the footer, or the button at the top of this page. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To meet our accountability obligation (GDPR Art. 7(1)) we record a log entry for every decision, containing only the following: a random identifier (the UUID stored with your decision), your user ID if you are signed in, the content of the decision per category, the method of the decision, the version of this notice, the interface language and a timestamp. We log no IP address and no browser fingerprint. Log entries are retained for 5 years after the consent ends (the general limitation period under the Hungarian Civil Code).
9. Managing cookies in your browser
You can also delete or block cookies in your browser settings:
- •Chrome: Settings → Privacy and security → Third-party cookies
- •Firefox: Settings → Privacy & Security → Cookies and Site Data
- •Edge: Settings → Cookies and site permissions
- •Safari: Settings → Privacy → Cookies and website data
Please note that if you block strictly necessary cookies, some features of the website will not work properly (for example you will not be able to sign in, or your language preference will not be kept).
10. Your rights and remedies
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw your consent at any time. You can submit requests to support@skillion.hu; detailed information is available in our Privacy Policy (https://skillion.hu/privacy).
If you believe the processing is unlawful, you can lodge a complaint with the supervisory authority, in Hungary the National Authority for Data Protection and Freedom of Information (NAIH), or with the supervisory authority of your member state of residence, and you may also turn to the courts:
National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9.
Email: ugyfelszolgalat@naih.hu
Phone: +36 (1) 391 1400
Website: https://www.naih.hu
11. Changes to this notice
We review and update this notice from time to time, for example when introducing a new service or technology. In case of a material change the cookie banner reappears and we ask for your consent again. Current version: 1.0 (7 June 2026).
Contact
Email: support@skillion.hu
Email: info@skillion.hu